Aws Security Engineer

Position Overview At Atcuality , we are on a mission to deliver AI-native digital health platforms with uncompromising security and compliance.
We are seeking a Senior AWS Security Engineer with 5+ years of hands-on experience in healthcare security , cloud infrastructure hardening , and HIPAA compliance implementation .
This is a critical role where you'll architect and safeguard the core of our healthcare systems — ensuring PHI protection , HITRUST readiness , and enterprise-grade security at scale across our AI-powered applications.
Key Responsibilities Cloud Security Architecture & Implementation Design and secure AWS infrastructure for HIPAA-compliant applications Implement multi-tier defense-in-depth models using AWS native services: WAF, Shield, Guard Duty, Security Hub Configure secure VPCs, security groups, NACLs , and API Gateway protections Enforce zero-trust networking , least privilege IAM , and segmented microservice isolation Establish secure connectivity using VPN, Private Link, or AWS Direct Connect HIPAA Compliance & Healthcare Security Implement controls aligned with HIPAA Security Rule , HITECH Act , and HITRUST CSF Conduct regular HIPAA risk assessments , gap analysis, and audit readiness reviews Manage BAA compliance , secure PHI boundaries, and maintain audit logs Validate security controls for EHR systems, FHIR APIs , and clinical data exchanges Data Protection & Encryption Design and manage end-to-end encryption strategies for PHI (data in transit and at rest) Utilize AWS KMS , Secrets Manager , and Vault for key lifecycle management Implement tokenization, masking , and data classification solutions Detect and mitigate exposure with AWS Macie , Guard Duty , and DLP policies Backup & Disaster Recovery Architect resilient backup and restore workflows using AWS Backup, EBS Snapshots, and RDS strategies Implement cross-region replication , immutable backups , and ransomware-proof storage Define RTO/RPO targets for healthcare workloads and conduct disaster recovery drills Security Operations & Monitoring Integrate SIEM platforms (e.g., Splunk, Elastic, Sumo Logic) with Cloud Trail, Guard Duty, and Config Implement real-time threat detection , auto-remediation workflows, and 24/7 incident response Conduct vulnerability scans, pen tests , and maintain security metrics dashboards Identity & Access Management Design IAM policies , roles, and permissions enforcing least privilege and RBAC Integrate SAML/OIDC federation , enforce MFA , and monitor privileged access sessions Implement break-glass mechanisms and temporary credential rotation Required Qualifications ‍ Technical Expertise 5+ years in security engineering , with 3+ years on AWS Deep experience with AWS security services : IAM, KMS, WAF, Macie, Guard Duty, Shield, Security Hub Strong healthcare security background : HIPAA, PHI handling, HITRUST CSF Proven success securing EHRs, FHIR APIs , or health data platforms Expertise in encryption , key management , and secure backups Hands-on with Ia C : Terraform, AWS CDK, or Cloud Formation Core Competencies Network security, segmentation, and secure ingress/egress design Experience with container security (ECS, EKS, Fargate) CI/CD security and Dev Sec Ops implementation Scripting proficiency (Python, Bash, Power Shell) Familiarity with SOC 2 , Gx P , and FDA validation processes Required Certifications (Minimum 2) AWS Certified Security – Specialty AWS Certified Solutions Architect – Professional CISSP , CCSP , or equivalent security certification HCISPP (Healthcare Information Security and Privacy Practitioner) Preferred Qualifications HITRUST CCSFP (Certified CSF Practitioner) Knowledge of healthcare interoperability standards: HL7, FHIR Experience with Epic, Cerner , or EHR integrations Cloud migration experience with AWS-native compliance tools Familiarity with ransomware mitigation frameworks SOC 2 Type II and CMS/ONC compliance knowledge Technical Environment AWS Stack : EC2, S3, RDS, Lambda, EKS, ECS, VPC, WAF, Guard Duty, Shield, Macie Security Tooling : Hashi Corp Vault, AWS Secrets Manager, AWS Config, AWS Artifact Monitoring & SIEM : Cloud Watch, Cloud Trail, Datadog, Splunk Backup & Recovery : AWS Backup, S3 Glacier, Cross-region replication Ia C : Terraform, Cloud Formation, CDK Containers : Twistlock, Aqua Security, Sysdig Dev Sec Ops : Security scanning in CI/CD (Snyk, Checkov, etc.) Key Requirements Summary 5+ years in cloud security (with healthcare focus) Hands-on HIPAA and HITRUST implementation Expert in AWS encryption, backup, and IAM controls Experience with healthcare threat modeling, DR planning , and compliance reporting 24/7 availability for critical incident response What We Offer Full health, dental, and vision insurance Remote flexibility (Jamshedpur-based hybrid) Annual security conference & certification support Access to cutting-edge AWS security stack Ownership of critical security initiatives in AI-powered healthcare Generous PTO, mental wellness support, and on-call compensation Application Requirements Please email the following to career@atcuality.com : Updated resume showcasing AWS and healthcare security experience Cover letter detailing your healthcare compliance implementation experience List of relevant certifications (AWS, HIPAA, CISSP, HCISPP) Sample case study or HIPAA-compliant architecture you've implemented 2–3 professional references from healthcare security projects Interview Process HR Screening (30 mins) Technical Security Round (60 mins – AWS + Healthcare) Take-home security architecture challenge Technical Deep Dive (2 hrs – encryption, IAM, DR, HIPAA) Scenario-based security incident simulation HIPAA & HITRUST regulatory compliance interview Leadership & cultural fit Reference check + offer Critical Success Factors You are not just securing systems — you are safeguarding lives by protecting the integrity, privacy, and availability of sensitive health data.
You will be the security backbone for our entire AI-native healthcare infrastructure.
Aarna Tech Consultants Pvt.
Ltd.
(Atcuality) is an equal opportunity employer.
All applicants must be willing to undergo background checks due to the sensitivity of data managed.

---