AWS Cloud Security Architect with Healthcare

Job Description

About Quantiphi:

\n

\n

Quantiphi is an award-winning, AI-First digital engineering and consulting company focused on delivering high-impact Services and Solutions that help organizations solve what truly matters. We partner with enterprises to reimagine their businesses through intelligent, scalable, and transformative AI driving measurable outcomes at the very core of their operations.

\n

Since our founding in 2013, Quantiphi has tackled some of the world’s most complex business challenges by combining deep industry expertise, disciplined cloud and data engineering practices, and cutting-edge applied AI research. Our work is rooted in delivering accelerated, quantifiable business value, not just technology for technology’s sake.

\n

\n

Headquartered in Boston, Quantiphi is a global organization with 4,000+ professionals serving clients across key industry verticals, including BFSI, Healthcare & Life Sciences, CPG, MFG, TME etc.

\n

\n

As an Elite and Premier partner to leading cloud and AI platforms such as NVIDIA, Google Cloud, AWS, and Snowflake, we build and deliver enterprise-grade AI services and solutions that create real-world impact.

\n

\n

Our industry recognition includes:

\n

\n

\n
• 21x Google Cloud Partner of the Year awards in the last 8 years.
\n
• 3x AWS AI/ML award wins.
\n
• 3x NVIDIA Partner of the Year titles.
\n
• 2x Snowflake Partner of the Year awards.
\n
• Top analyst recognitions from Gartner, ISG, and Everest Group.
\n
• Consecutive certifications as a Great Place to Work.
\n

\n

\n

Be part of a trailblazing team that’s shaping the future of AI, ML, and cloud innovation.

\n

\n

Your next big opportunity starts here!

\n

\n

For more details, visit: Website or LinkedIn Page.

\n

\n

Role: Cloud Security Technical Architect with Healthcare background

\n

Employment type: Full Time

\n

Location: Remote (USA)

\n

\n

Key skill : - AWS cloud security architect with Healthcare background.

\n

\n

Must have : -

\n

\n

\n
• Deep knowledge of AWS security services: IAM, KMS, Security Hub, GuardDuty, AWS Config, VPC Security, WAF, Network Firewall.
\n
• Hands-on experience with either of IaC tools: CloudFormation, Terraform, CDK.
\n

\n

\n

What will you do:

\n

\n

Healthcare Application Security:

\n

\n

\n
• Serve as a hands-on expert in securing EPIC modules, including but not limited to EpicCare, MyChart, Epic Bridges, and Chronicles.
\n
• Design, implement, and validate security controls for UI applications integrating with
\n
• Epic, ensuring secure data exchange and user access.
\n
• Conduct security architecture reviews and threat modeling specifically for Epic environments and integrated healthcare applications.
\n
• Collaborate with Epic technical teams and application developers to embed security best practices throughout the development lifecycle.
\n
• Develop and enforce secure configuration standards for Epic environments and related infrastructure.
\n

\n

\n

Compliance & Regulatory Expertise:

\n

\n

\n
• Lead efforts to ensure all healthcare applications and infrastructure meet stringent compliance requirements, including US PII, HIPAA, HITRUST, and other relevant healthcare regulations.
\n
• Develop and implement security controls and processes to achieve and maintain HITRUST certification readiness.
\n
• Participate in compliance audits, provide evidence, and address findings related to security controls.
\n
• Stay abreast of evolving healthcare regulations and industry best practices to proactively adapt security strategies.
\n
• FDA Clearance Exposure: Work on or have exposure to the security aspects required for FDA clearance processes for medical devices or software as a medical device (SaMD),
\n
• ensuring security documentation and controls align with regulatory expectations.
\n
• Cloud Security Architecture & Implementation (AWS Focus):
\n
• Design, build, and secure AWS platform infrastructure using IaC (CloudFormation / Terraform).
\n
• Implement and manage security controls across AWS environments (IAM, KMS, Secrets Manager, Network Firewall, WAF).
\n
• Build automated security guardrails and compliance checks using AWS Security Hub, Config, and IAM Access Analyzer.
\n
• Develop secure CI/CD pipelines, including automated policy checks, vulnerability scans, and artifact integrity validation for healthcare applications.
\n
• Implement centralized logging and monitoring using CloudWatch, SIEM tools (e.g.,
\n
• Splunk, Sumo Logic), GuardDuty, and VPC Flow Logs, with a focus on HIPAA-compliant logging.
\n
• Collaborate with application and DevOps teams to define secure architecture patterns, network segmentation, and zero-trust controls for healthcare workloads.
\n

\n

\n

Security Operations & Governance:

\n

\n

\n
• Conduct regular security assessments, risk reviews, and threat modeling for workloads
\n
• hosted on AWS and integrated with Epic.
\n
• Enforce tagging standards, data-classification controls, and lifecycle policies across AWS
\n
• resources, particularly for PHI.
\n
• Support incident response activities, root-cause analysis, remediation planning, and
\n
• post-incident improvements, with a focus on PHI breach protocols.
\n
• Document platform security design, runbooks, best practices, and alignment with
\n
• enterprise security standards and healthcare regulations.
\n
• Manage and integrate security tools such as SIEM, DLP, Cloud Proxy, CASB, or Isolation
\n
• systems when relevant to AWS workloads and Epic integrations.
\n
• Provide training and guidance to engineering teams on secure AWS usage, identity
\n
• governance, and least privileged access within a healthcare context.
\n
• Experience integrating AWS environments with Security Operations Centers (SOC) for
\n
• real-time alerting, threat detection, and incident escalation workflows, specifically for
\n
• PHI-related events.
\n

\n

\n

Basic Qualifications (BQ):

\n

\n

\n
• Overall, 8-10 years of Experience in cloud platform/security engineering, with at least 3-5 years specifically in cloud security/cybersecurity.
\n
• Deep, hands-on expertise with Epic modules and their security configurations, includingintegration points with UI applications.
\n
• Proven experience with US PII, HIPAA, HITRUST, and other compliance requirements for regulatory healthcare applications.
\n
• Experience working on or exposure to FDA clearance processes, particularly the security aspects.
\n
• Deep knowledge of AWS security services: IAM, KMS, Security Hub, GuardDuty, AWS Config, VPC Security, WAF, Network Firewall.
\n
• Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, data protection, and network security fundamentals.
\n
• Hands-on experience with either of IaC tools: CloudFormation, Terraform, CDK.
\n
• Proficiency in scripting languages such as Python or Bash for automation.
\n
• Experience setting up centralized logging, SIEM integrations, and security event monitoring, with a focus on audit trails for PHI.
\n
• Strong understanding of CI/CD security, artifact scanning, secrets management, and pipeline hardening.
\n
• Knowledge of network security tools and concepts: firewalls, proxies, routing, segmentation, DLP, isolation appliances.
\n
• Familiarity with compliance frameworks (GDPR, HIPAA, PCI, SOC2) and ability to enforce security baseline standards.
\n
• Strong analytical and troubleshooting skills to resolve platform and security issues.
\n
• Excellent communication and collaboration skills to work across cross-functional engineering and security teams, including clinical and compliance stakeholders.
\n
• Exposure to advanced data protection practices such as data classification, DLP controls, encryption strategy design, and secure data lifecycle management for PHI.
\n

\n

\n

Preferred Qualifications (PQ):

\n

\n

\n
• Experience securing multi-cloud (AWS + GCP/Azure) environments.
\n
• Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
\n
• Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
\n
• Experience with AWS Macie, Detective, and advanced data governance solutions.
\n
• Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
\n
• Familiarity with incident response processes and playbook automation (SOAR).
\n
• Experience designing isolation, or exfiltration-prevention controls.
\n
• Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty).
\n
• Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case, management, ticketing systems, and threat intelligence enrichment.
\n
• Hands-on knowledge of security incident management, including detection investigation, containment, eradication, recovery, and post-incident reviews.
\n
• Experience with other healthcare-specific security frameworks or standards (e.g., NIST CSF for Healthcare).
\n
• Familiarity with Epics security architecture and best practices documentation.
\n