Cloud Security Architect/Engineer

A large healthcare system in the Philadelphia area is seeking a Cloud Security Engineer/Architect with a strong background in Azure to support enterprise cloud security and governance initiatives. This role will serve as a critical bridge between technical engineering teams and non-technical GRC stakeholders, translating complex security concepts into actionable outcomes. This individual will play a key role in improving cloud compliance posture, remediating security findings, and helping shape governance frameworks for emerging AI-driven applications. Key Responsibilities

• Partner with engineering and GRC teams to translate security requirements into technical solutions and vice versa
• Drive remediation of cloud security and compliance findings across Azure environments (e.g., encryption gaps, misconfigurations)
• Support ongoing efforts to improve compliance posture and enforce preventive controls (e.g., shifting policies from audit to deny)
• Contribute to the design and implementation of cloud security architecture and governance frameworks
• Assist with security oversight of AI-enabled applications (e.g., Copilot, Copilot Studio, Azure AI Foundry, Claude)
• Ensure all cloud environments align with Azure security and compliance standards
• Partner with engineering teams to address large-scale configuration issues and implement sustainable fixes across thousands of resources
• Validate and enforce security policies across Azure resources (e.g., private link requirements, encryption standards)
• Support implementation and continuous improvement of cloud security benchmarks spanning frameworks such as HIPAA, PCI, CIS, and NIST

• 5+ years of experience in Cloud Security Engineering or Architecture
• Strong experience securing Azure environments and native Azure security tools

• Proven background in: o Cloud security remediation and vulnerability management o Identifying and resolving misconfigurations at scale o Driving compliance initiatives across large environments

• Ability to operate as a liaison between technical teams and non-technical stakeholders
• Experience working cross-functionally to drive issue resolution and accountability
• Strong understanding of cloud security best practices and policy enforcement
• Exposure to AI/ML governance and security considerations in enterprise environments
• Familiarity with Infrastructure as Code (IaC) concepts, particularly Terraform / understanding of “policy as code” frameworks in Azure

Nice to Have Skills & Experience

• Experience with Cloud Security Posture Management tools (e.g., Wiz)

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.