Cloud Security Engineer
Lalit KumarUnited StatesSENIORPosted 4d ago
AWSIAMSSOSCIMDatabricksUnity CatalogRBACABACKMSSecrets ManagerCloudTrailAWS ConfigGuardDutySecurity HubHIPAANISTPHI
About the Role
We are seeking an experienced Cloud Security Engineer to lead security architecture for a HIPAA-aligned Databricks-on-AWS platform in the healthcare domain.
Key Responsibilities
• Design least-privilege AWS IAM, SSO, SCIM, service principal, and privileged-access controls
• Implement Databricks Unity Catalog security, RBAC/ABAC, access governance, row filters, and column masking
• Define AWS security controls using KMS, Secrets Manager, CloudTrail, AWS Config, GuardDuty, and Security Hub
• Align security controls with HIPAA safeguards, NIST frameworks, and healthcare security policies
• Ensure secure PHI handling, data masking, and minimum-necessary access
• Lead security reviews, risk assessments, remediation, and engagement with CISO stakeholders
• Prepare audit evidence, control traceability, security test results, and operational runbooks
Requirements
• 12+ years of cybersecurity / cloud security experience
• 3+ years of experience securing Databricks or comparable lakehouse platforms
• Strong healthcare and HIPAA compliance experience
• Hands-on expertise in AWS security and Databricks Unity Catalog