.jpg)
POSITION SUMMARY:
The AWS Cloud Security Engineer role at Boston Medical Center Health System (BMCHS) is responsible for the development, management, and ongoing support of our public cloud information security strategy. This role will collaborate closely with infrastructure, application, and other internal and partner teams to achieve organizational goals in the public cloud, while promoting and maintaining strong adherence to and enforcement of security policies and best practices. The AWS Cloud Security Engineer II will provide value and be a primary source of knowledge in building secure, compliant, and cost-effective AWS solutions. Team members in this role will administer, maintain, and ensure that AWS and 3rd party security technologies are highly available, actionable, and can support the critical needs of the business. Strong communication skills and the ability to build/maintain/grow new relationships will ensure you can execute effectively in this role.
Position: AWS Cloud Security Engineer
Department: Information Technology
Schedule: Full Time
ESSENTIAL RESPONSIBILITIES / DUTIES:
- Design, manage, support, and implement cloud security policies, services, and projects.
- Provide architectural security guidance in compliance with industry standards (HIPAA, NIST, CIS) for public cloud environments.
- Review and provide security-significant feedback on designs and proposed changes submitted by others within the organization.
- Frequently communicate and present technical data to audiences with varying levels of technical knowledge.
- Frequently communicate with and present to upper management.
- Manage cloud firewall, DLP, and vulnerability scanning technology.
- Support L1 in resolving cloud-security related issues and follow/improve documented Incident Response playbooks
- Research new technology and assist in proof-of-concept testing.
- Document security standards and processes.
- Work with other internal BMC Security / infrastructure teams to remediate vulnerabilities and other security issues.
- Contribute to design decisions for new technology or existing technology being used in a new way.
- Coordinate findings remediation of known vulnerabilities within the organization’s cloud presence.
- Assist in the education of the workforce on security topics through training and awareness opportunities.
- Provide less experienced security engineers with feedback and guidance on projects and skills development.
(The above statements in this job description are intended to depict the general nature and level of work assigned to the employee(s) in this job. The above is not intended to represent an exhaustive list of accountable duties and responsibilities required).
JOB REQUIREMENTS
EDUCATION:
Bachelor’s degree in Computer Science, Engineering, or related discipline; equivalent experience acceptable.
CERTIFICATES, LICENSES, REGISTRATIONS REQUIRED:
- CCSP, CISSP, CEH, Security+, or other security related certifications preferred
EXPERIENCE:
- 3+ years of experience managing information security in a public cloud environment (AWS, Azure, GCP). Strong, demonstrated AWS expertise required
- 4+ years of experiences in information security
- 7+ years of experience in IT (information technology), preferentially with development, network, or systems administration experience
- Healthcare domain knowledge and working in regulated environments is a plus (HIPAA, HITRUST, SOC2, PCI-DSS)
- AWS Certifications, Architect Associate or Professional required. Security or Advanced Networking level specialty certs are a plus
KNOWLEDGE AND SKILLS:
- Expert-level knowledge of AWS GuardDuty, Security Hub, Macie, Inspector, Trusted Advisor
- Knowledge of Edge protection technologies such as AWS Shield, WAF, CloudFront
- Strong working understanding of Identity and Access Management (IAM) and SSO Integration via Active Directory (Azure AD / ADFS)
- Experience working in organizations with top level Control Tower or Landing Zone Accelerator (SCP’s, Guardrails, Config Rules, etc.)
- Experience with monitoring systems such as CloudWatch / VPC Flow Logs and other industry standard visibility platforms (Splunk, DataDog, Dynatrace, New Relic, etc.)
- Experience with Logging and log monitoring (CloudWatch and CloudTrail) both for security and compliance efforts
- Proficiency with one or more scripting languages (python, json, yaml, bash, etc.)
- Proficiency with Infrastructure as Code (IaC), including CloudFormation and/or Terraform
- Understanding of CI/CD on AWS platform
- Expert knowledge of AWS network and security features (VPC, Security Groups, NACLs, ALB/NLB, Transit Gateway, etc.)
- Experience supporting applications with native services and serverless architecture (Lambda) on AWS platform
- Strong understanding of high availability solutioning (multi-AZ / regions, Backup) and how security fits into this model
- Demonstrated history of moving mission-critical applications from the datacenter to AWS
- Ability to effectively adapt to rapidly changing technology and apply it to business needs
Compensation Range:
$89,500.00- $130,000.00This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.
NOTE: This range is based on Boston-area data, and is subject to modification based on geographic location.
Equal Opportunity Employer/Disabled/Veterans
According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.
Skills Required
- Bachelor's degree in Computer Science, Engineering, or a related discipline; equivalent experience accepted
- AWS Architect Associate or Professional certification
- 3+ years managing information security in a public cloud environment, with strong AWS expertise
- 4+ years of information security experience
- 7+ years of IT experience, preferably in development, networking, or systems administration
- CCSP, CISSP, CEH, Security+, or another security-related certification
- AWS Security or Advanced Networking specialty certification
- Healthcare domain knowledge and experience in regulated environments
- Expert knowledge of AWS security services, network security, IAM, monitoring, logging, and compliance technologies
- Proficiency in one or more scripting languages, such as Python, JSON, YAML, or Bash
- Proficiency with Infrastructure as Code, including CloudFormation or Terraform
- Understanding of CI/CD on AWS
- Experience supporting native AWS and serverless applications, including Lambda
- Experience migrating mission-critical applications from datacenters to AWS
Boston Medical Center (BMC) Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Boston Medical Center (BMC) and has not been reviewed or approved by Boston Medical Center (BMC).
-
Pay Growth & Progression — Recent union agreements delivered significant raises for nurses and many non‑RN groups, lifting pay levels in those cohorts. Feedback suggests these structured increases improved satisfaction for roles covered by the contracts.
-
Affordable Benefits — An option for a no‑premium medical plan, strong pharmacy discounts, and low‑cost same‑day care position healthcare as cost‑effective. Additional programs like diabetes support and coaching further reduce out‑of‑pocket burden.
-
Leave & Time Off Breadth — Full‑time staff receive a large PTO bank that grows over time and extended parental leave for birth or adoption. Colleagues also have access to emergency child and elder care supports and childcare discounts.
Boston Medical Center (BMC) Insights
What We Do
Boston Medical Center, located in Boston’s historic South End, is a private, not-for-profit, 567-bed, academic medical center and the primary teaching affiliate for Boston University School of Medicine. Recognized for its high-quality, nationally ranked and comprehensive medical care for the entire family, patients have access to the most current treatment and advancements at BMC. BMC physicians lead the way in pioneering new therapies that impact the care of patients locally and worldwide. In 2013, BMC made the decision to invest in a four-year campus redesign that includes additions to buildings, upgrades to existing structures, and an expansion of the Emergency Department. Once completed, the redesign will provide clinical workspaces with state-of-the-art facilities and equipment to solve BMC's most pressing care delivery needs. Already complete, the hospital’s Shapiro Center is Boston’s newest outpatient care facility and features a quarter-million square feet of clinic space, key support services, one of the region’s most technologically advanced pharmacies, and a bright, spacious café. Housed in a facility that provides world-class, patient-centered care at every visit, BMC doctors are among the best in their field. Many are recognized annually as “Top Doctors” in their medical and surgical specialties by publications such as U.S. News & World Report and Boston magazine. Boston Medical Center is also the largest safety net hospital in New England and extends into the community as a founding partner of Boston HealthNet, a network of 15 community health centers throughout Boston serving more than a quarter million people annually. No matter whom you meet at BMC, all are committed to providing every patient and family member with the highest quality of care, respect, warmth and compassion.
.png)
