Cloud Engineer Lead - Security

Cloud Engineer Lead - Security

Cloud Engineer Lead - Security

Location: This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

At Elevance Health, we are transforming how cloud technology supports healthcare delivery and innovation.

The Cloud Engineer Lead - Security combines deep expertise in cloud platforms with advanced cloud security knowledge and operates as a hands-on technical leader, building secure cloud solutions, contributing to code and automation, and driving a security-first engineering culture. Will partner with business and technology stakeholders to design, build, and secure enterprise cloud platforms and application services aligned with organizational strategy and healthcare regulatory requirements. Responsible for leading the end to end application system development and maintenance on large complex enterprise wide technology platforms.

How you will make an Impact:

• Design and build secure, scalable, and resilient cloud architectures across AWS, Azure, and/or GCP.
• Implement and maintain infrastructure-as-code (Hashi, PHP, Python, MCPs) with embedded security controls.
• Build automated compliance solutions aligned to HIPAA, HITRUST, NIST, and ISO frameworks.
• Build and enforce secure patterns for IAM (PIM/PAM), encryption, secrets management, and network security w/zero trust.
• Develop and integrate DevSecOps pipelines, including SAST, DAST, and policy-as-code enforcement.
• Conduct hands-on vulnerability remediation and security hardening supporting cloud workloads.
• Build and enhance cloud-native platforms (containers, Kubernetes, service mesh) with integrated security controls.
• Write and maintain automation and platform code to improve scalability, reliability, and security posture.
• Lead debugging and resolution of complex cloud and security issues in production environments.
• Serve as a technical leader and mentor, providing code reviews, design guidance, and hands-on support for security related needs.
• Maintains active relationships with customers to determine business requirements, leads requirements gathering meetings and reviews designs with the business.
• Anticipates broad technical change and ensures that company technology stays ahead of the curve.
• Prioritize projects and make trade-offs with respect to the enterprise systems changes based on broader business needs.
• Understands the entire architecture for a major part of our business and is able to articulate the scaling and reliability limits.
• Develops and defines application scope and objectives and supervises the preparation of technical and/or functional specifications from with programs will be written.
• Performs technical design reviews and code reviews.
• Ensures unit test is completed and meets the test plan requirements, system testing is completed and system is implemented according to plan.
• May participates in developing the multi-year technology strategy for critical areas of the business that may encompass multiple systems.
• Partners with technical and non technical stakeholder to identify the long term technical trajectory of the technology infrastructure.
• Creates architecture and anticipates future technology needs.
• Leads the conversations internally about the direction of major areas of the technology, drives wide-team consensus to the adoption of this direction, and uses this direction when engaging engineers.
• Reviews and monitors initiatives for end to end impact and coordination.
• Participates in review and decision making for enterprise solutions.

Minimum Requirements:

Requires an BA/BS degree in Information Technology, Computer Science or related field of study a minimum of 9 years experience; multi dimensional platform experience, expert level experience with business and technical applications; or any combination of education and experience, which would provide an equivalent background.

Preferred Skills, Experiences and Competencies:

• Hands on experience with AI technology; IDE and/or Services
• Strong expertise in cloud security including IAM, encryption, network security, and workload protection
• Proven experience writing production-quality code (Python, Go, Bash, or similar)
• Experience with infrastructure-as-code tools
• Deep understanding of networking concepts including VPCs, subnets, firewalls, and zero trust models
• Experience implementing DevSecOps and secure CI/CD pipelines
• Experience working in regulated environments, preferably healthcare
• Strong knowledge of compliance frameworks such as HIPAA, HITRUST, NIST, and SOC2
• Experience building and securing enterprise cloud platforms supporting healthcare products
• Experience working in large, matrixed organizations to deliver scalable engineering solutions
• Industry certifications such as AWS Solutions Architect, AWS Security Specialty, Azure Security Engineer, or CISSP
• Experience with containerization and orchestration (Docker, Kubernetes)
• Experience with cloud security tooling (CSPM, CWPP, SIEM, secrets management)
• Strong background in application security and secure coding practices