Senior Cloud Security Engineer (AWS)

About the product
Our client is a US-based healthcare technology company that develops medical-device technology and provides remote cardiac monitoring services. Its environment combines connected medical devices, cloud software, and clinical workflows, with a strong focus on service reliability, patient-data security, and regulatory compliance.
Technology stack
AWS: IAM, Identity Center, EC2, VPC, S3, RDS/Aurora, CloudWatch, CloudTrail, GuardDuty, Inspector, KMS, Systems Manager, Secrets Manager
Microsoft: Microsoft 365, Entra ID, Intune, Windows Autopilot, Microsoft Defender
Systems: Windows and Linux administration
IaC and automation: Terraform and/or CloudFormation, PowerShell, Python or Bash, Microsoft Graph and AWS APIs
Security platforms: Cloudflare Zero Trust, Purview, MDR platforms
Fundamentals: networking, DNS, TLS, identity, logging, cloud security

Your team
You will be part of the security function of a US-based company and will report directly to the CISO. On a daily basis, you will work with the DevOps team and with colleagues from software engineering, Corporate IT, Clinical Operations, and Quality/Regulatory. Your shift covers the hours when the US team is offline, so you will own your coverage window and hand over to the US Central team with clear, written updates.

Culture
We are committed to implementing high standards in the technology industry, and it is the fundamental mission of our work. To achieve this goal, the company and all its members are constantly evolving.
Each of us has the opportunity to contribute to the product, the company, the team, the industry, and our personal development. At Techstack, you have the option to choose from various growth opportunities that align with your interests:

• meetups, where you can share your knowledge and develop simultaneously by sharing your experiences within the company and local technical communities;
• roles such as a mentor or a technical lead. In any of these roles, you will assist junior professionals and share your knowledge and experiences with them.
• participation in our technical Guilds, where you can discuss technical solutions, approaches, and industry trends.

All of these elements contribute to shaping the culture and expertise within both our team and the company as a whole.

Your responsibilities
Operate, secure, and troubleshoot AWS infrastructure across multiple accounts.
Administer Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Teams, SharePoint, and OneDrive.
Manage identity, access, endpoint compliance, and secure SaaS integrations.
Monitor security and service health, investigate alerts, and coordinate incident response.
Support backup, recovery, patching, capacity management, and infrastructure as code.
Maintain controls and audit-ready evidence for HIPAA, SOC 2, HITRUST, and other regulatory requirements.
Create automation, operational documentation, and runbooks.
Prepare clear handoffs to the US team at the end of each shift.
Participate in planned maintenance.

It's about you
Experience working in a SOC 2-compliant organization, including at least one audit or assessment cycle.
Hands-on experience with MDR/SIEM tools.
Experience with tools similar to Cloudflare Zero Trust.
Hands-on AWS administration (AWS should be your strongest platform).
5+ years of experience in infrastructure engineering, systems administration, cloud operations, or security operations, with independent ownership of production systems.
Working-level experience with Microsoft 365 and Entra ID, plus a basic understanding of Intune.
Experience with Windows endpoints and Windows/Linux servers.
Strong troubleshooting skills across cloud infrastructure, networking, identity, and security.
Experience with incident response, endpoint security, vulnerability management, and patching.
Strong PowerShell and practical Python or Bash skills.
Good written English, independent ownership, and effective remote collaboration.
Ability to learn fast and fill knowledge gaps on your own.
Will be a plus:
Knowledge of HIPAA and HITRUST practices.
Hands-on experience with Cloudflare Zero Trust and Purview.
Deeper Intune and Windows Autopilot experience.
Terraform and/or CloudFormation.
Experience in healthcare, medical devices, or another regulated industry.

What we have for you
Stable and long-term position in an experienced team.
Broad opportunities for professional and career growth, including professional challenges that encourage personal development, meetups, hackathons, professional communities, and more.
Horizontal connections and the absence of micromanagement foster a collaborative environment in which all team members are accessible to one another for any concerns.
Hubs in Kharkiv, Kyiv, Lviv, and Wrocław (Poland), or everything necessary for remote work.
Up to 50% compensation for the cost of educational courses and conferences to support professional development.
Free English language and business English courses.
20 days off and 7 sick days to support your health and well-being.
Legal and accounting support.
Appreciation gifts for significant events and occasions.

How to join Techstack
Pre-screening with a recruiter.
Review of your resume by experts.
English check.
Interview with our experts.
Interview with our client.
Technical test task (optional).

About us
Techstack is a technology product engineering company that sets an example for high development standards in the IT industry. We empower each team member to influence the development of the product, company, and processes.
Learn more about Techstack