Infrastructure Engineer - Cloud Security

About This Role

Tile Health processes protected health information across a complex multi-account cloud environment. The Infrastructure Engineer for Cloud Security will embed security directly into our infrastructure provisioning, deployment pipelines, and runtime environments. This role is equal parts security engineering and infrastructure automation, requiring someone who can reason about threat models and translate them into concrete, enforceable technical controls.

What You'll Do

• Implement and maintain cloud security guardrails using AWS SCPs, IAM policies, and detective controls (Config, GuardDuty, SecurityHub)
• Design network architecture with defense-in-depth principles including VPC segmentation, WAF rules, and private endpoints
• Build automated compliance-as-code checks that validate infrastructure deployments against CIS benchmarks and HIPAA requirements
• Manage secrets rotation, certificate lifecycle, and encryption key management using AWS KMS and Secrets Manager
• Conduct infrastructure threat modeling sessions and drive remediation of identified risks

What We're Looking For

• 5+ years of infrastructure or cloud engineering experience with a strong security orientation
• Deep expertise in AWS security services (IAM, KMS, GuardDuty, SecurityHub, Config, CloudTrail)
• Proficiency in infrastructure-as-code (Terraform) with experience writing custom policy-as-code (OPA/Sentinel)
• Understanding of cryptographic fundamentals including TLS, envelope encryption, and key management best practices
• Experience with container security including image scanning, runtime protection, and pod-level security policies
• Strong documentation and communication skills for writing security architecture documents and runbooks

Nice to Have

• HIPAA or HITRUST technical control implementation experience
• AWS Security Specialty or CKS (Certified Kubernetes Security) certification
• Experience with infrastructure penetration testing and vulnerability assessment
• Background in healthcare or financial services regulated environments