Cloud and Devops Security Engineer

Cloud and Devops Security Engineer
Remote

At Kodiak Solutions, we’re dedicated to transforming the healthcare industry through cutting-edge, technology-driven solutions. We specialize in healthcare finance, unclaimed property, risk management, and revenue cycle management, helping healthcare organizations streamline complex financial operations. Our mission is to simplify and optimize processes, so healthcare providers can focus on delivering excellent patient care.

Powered by our innovative platform, we offer cloud-based systems, automated workflows, and advanced data management tools designed to address the unique challenges in healthcare. Whether it's improving revenue cycle efficiency, navigating unclaimed property issues, or mitigating risk, our platform delivers real-time, actionable insights to drive better outcomes.

The Cloud and Devops Security Engineer has the responsibility of partnering directly with Product Engineering, DevOps, platform engineering, architecture, and IT teams. The role integrates security into cloud architecture, infrastructure as code, CI/CD pipelines, and production release processes. This engineer is expected to move beyond identifying control gaps by helping teams design, implement, test, and validate practical remediations. The role also participates in the security on-call rotation, incident management, and broader security engineering activities as part of a collaborative team.

Essential Duties and Responsibilities may include the following.  Other duties may also be assigned.

    - Integrate security controls, testing, and policy enforcement into CI/CD pipelines and cloud-native development processes.
    - Partner with engineering teams to design, build, and maintain secure, resilient cloud infrastructure and application environments.
    - Assess and strengthen the security of cloud platforms, identities, networks, containers, Kubernetes environments, and data protection controls.
    - Develop and maintain security automation using Infrastructure as Code (IaC), Policy as Code (PaC), and DevSecOps tools.
    - Perform threat modeling, architecture reviews, vulnerability assessments, and security testing to identify and mitigate risk.
    - Drive remediation efforts by investigating security findings, implementing corrective actions, and validating resolution effectiveness.
    - Support incident response, vulnerability management, security monitoring, and continuous improvement of the organization's security posture.
    - Develop security standards, reference architectures, technical guidance, and reusable controls while effectively communicating risks and recommendations to stakeholders.

Qualifications:
    - 5+ years of experience in DevOps, cloud engineering, security engineering, or a related technical field.
    - Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
    - Experience securing Microsoft Azure environments and implementing security controls within engineering workflows.
    - Strong knowledge of cloud security architecture, including identity, networking, containers, storage, key management, logging, and monitoring.
    - Experience with CI/CD platforms, source control, and DevSecOps practices.
    - Proficiency with Infrastructure as Code (IaC) and automation tools such as Terraform, Bicep, PowerShell, Python, or similar technologies.
    - Experience with application, cloud, container, API, and infrastructure security testing tools.
    - Knowledge of Kubernetes, container security, vulnerability management, and cloud security best practices.
    - Familiarity with secure software development frameworks such as OWASP, NIST SSDF, and CIS Benchmarks.
    - Experience supporting security incident response, investigations, and remediation activities.
    - Relevant cloud, security, or DevOps certifications preferred.

Candidates must be legally authorized to work in the United States.  This position is not eligible for employment visa sponsorship now or in the future.