Cloud Security Engineering Specialist

• Cloud Security Engineering: Design, implement, and continuously improve security across enterprise multi-cloud environments (Azure, GCP, and OCI) by developing secure landing zones, cloud security architectures, identity controls, Infrastructure as Code (Terraform) guardrails, and Kubernetes/container security capabilities.
• CNAPP & Cloud Risk Management: Engineer and optimize Cloud-Native Application Protection Platform (CNAPP) capabilities. Drive vulnerability prioritization, remediation strategies, configuration drift detection, and continuous compliance across cloud environments.
• Threat Detection & Security Automation: Develop automated security controls, policy enforcement, and remediation workflows to improve cloud visibility, operational efficiency, and secure-by-default deployments.
• AI Security & Governance: Partner with AI Security, AI Engineering, and Cloud Engineering teams to assess AI technologies and workloads, prioritize and mitigate AI-related risks, develop cloud and AI security standards and technical controls, and support the secure AI development lifecycle (AI SDLC).
• Technical Leadership & Security Standards: Develop cloud security standards, perform design reviews and threat modeling, evaluate emerging technologies, and mentor team members through technical guidance, knowledge sharing, and hands-on coaching.

Cloud Computing, Software Engineering, Cloud Computing, Software Engineering, Continuous Improvement, GCP (Good Clinical Practices), Security Architecture, Microsoft Windows Azure, Cloud Architecture, Security Design, * High School diploma equivalency with 2 years of cumulative experience OR Associate’’s degree/Bachelor’’s degree OR 4 years of applicable cumulative job specific experience required., * Cloud Security & CNAPP Technical Expertise: 5+ years of hands-on experience engineering, securing, and operating enterprise cloud environments across Azure, GCP, or OCIâincluding deep technical expertise in cloud networking, IAM, Kubernetes/containers, Infrastructure as Code (Terraform), CI/CD security, and cloud logging. Requires proven experience deploying and managing leading CNAPP platforms (such as Wiz, Prisma Cloud, Orca, Defender for Cloud, or Upwind); relevant certifications like CCSP or CISSP are preferred.

• AI Workload Security & Governance: Advanced understanding of modern AI security concepts, including the OWASP Top 10 for LLM Applications, AI-specific threat vectors and risks, secure AI SDLC practices, and governance frameworks for enterprise AI workloads.

Benefits that help you thrive

• Comprehensive health coverage: medical, dental, vision, prescription coverage and HSA/FSA options
• Financial security & retirement: employer-matched 403(b), planning and hardship resources, disability and life insurance
• Time to recharge: pro-rated paid time off (PTO) and holidays
• Career growth: Ascension-paid tuition (Vocare), reimbursement, ongoing professional development and online learning
• Emotional well-being: Employee Assistance Program, counseling and peer support, spiritual care and stress management resources
• Family support: parental leave, adoption assistance and family benefits
• Other benefits: optional legal and pet insurance, transportation savings and more

Life at Ascension: Where purpose meets opportunity

Ascension is a leading nonprofit Catholic health system with a culture and associate experience grounded in service, growth, care and connection. We empower our 99,000+ associates to bring their skills and expertise every day to reimagining healthcare, together. Recognized as one of the Best 150+ Places to Work in Healthcare and a Military-Friendly Gold Employer, you’‘ll find an inclusive and supportive environment where your contributions truly matter.