Embed security into a cloud-native healthcare platform by designing secure architectures for authentication, authorization, API protection, and service-to-service communication. Perform threat modeling, architecture reviews, integrate identity platforms (Okta, AWS Cognito), implement OAuth2/OpenID Connect/JWT patterns, and add security controls into CI/CD and developer tooling to enable secure-by-default services.

Support HITRUST, HIPAA, and SOC 2 readiness and certification activities; conduct gap assessments and remediation; implement and monitor security controls; guide MyCSF and HITRUST framework usage; collaborate with IT and People Operations; prepare audit findings, risk assessments, and executive compliance reports; and support internal compliance training and third-party risk management.