Cloud Security Engineering Specialist

Your future role at a glance Location: Remote Department: Security Schedule: Full Time, Days Salary: $105,830.21 - $147,521.09 per year #LI-Remote Life at Ascension: Where purpose meets opportunity Ascension is a leading nonprofit Catholic health system with a culture and associate experience grounded in service, growth, care and connection. We empower our 97,000+ associates to bring their skills and expertise every day to reimagining healthcare, together. Recognized as one of the Best 150+ Places to Work in Healthcare and a Military-Friendly Gold Employer, you’ll find an inclusive and supportive environment where your contributions truly matter. Benefits that help you thrive Comprehensive health coverage: medical, dental, vision, prescription coverage and HSA/FSA options Financial security & retirement: employer-matched 403(b), planning and hardship resources, disability and life insurance Time to recharge: pro-rated paid time off (PTO) and holidays Career growth: Ascension-paid tuition (Vocare), reimbursement, ongoing professional development and online learning Emotional well-being: Employee Assistance Program , counseling and peer support, spiritual care and stress management resources Family support: parental leave, adoption assistance and family benefits Other benefits: optional legal and pet insurance, transportation savings and more How you’ll make an impact in this role Cloud Security Engineering: Design, implement, and continuously improve security across enterprise multi-cloud environments (Azure, GCP, and OCI) by developing secure landing zones, cloud security architectures, identity controls, Infrastructure as Code (Terraform) guardrails, and Kubernetes/container security capabilities. CNAPP & Cloud Risk Management: Engineer and optimize Cloud-Native Application Protection Platform (CNAPP) capabilities. Drive vulnerability prioritization, remediation strategies, configuration drift detection, and continuous compliance across cloud environments. Threat Detection & Security Automation: Develop automated security controls, policy enforcement, and remediation workflows to improve cloud visibility, operational efficiency, and secure-by-default deployments. AI Security & Governance: Partner with AI Security, AI Engineering, and Cloud Engineering teams to assess AI technologies and workloads, prioritize and mitigate AI-related risks, develop cloud and AI security standards and technical controls, and support the secure AI development lifecycle (AI SDLC). Technical Leadership & Security Standards: Develop cloud security standards, perform design reviews and threat modeling, evaluate emerging technologies, and mentor team members through technical guidance, knowledge sharing, and hands-on coaching. What minimum requirements you’ll need Education: High School diploma equivalency with 2 years of cumulative experience OR Associate's degree/Bachelor's degree OR 4 years of applicable cumulative job specific experience required. What additional preferences we're seeking 5+ years of experience in cloud infrastructure, cloud engineering, or cloud security, with demonstrated hands-on expertise securing enterprise Azure, GCP, and/or OCI environments. Extensive experience implementing, engineering, and operating a leading CNAPP solution (e.g., Wiz, Prisma Cloud, Orca Security, Microsoft Defender for Cloud, Upwind, or similar). Advanced knowledge of cloud networking, IAM, Kubernetes, containers, Infrastructure as Code (Terraform), CI/CD security, cloud logging, and cloud-native security services. Understanding of AI security concepts, including OWASP Top 10 for LLM Applications, AI-specific threats and risks, secure AI development lifecycle (AI SDLC), and governance for AI workloads. Relevant security certifications (CCSP or CISSP) are preferred. Equal employment opportunity employer Ascension provides Equal Employment Opportunities (EEO) to all associates and applicants for employment without regard to race, color, religion, sex/gender, sexual orientation, gender identity or expression, pregnancy, childbirth, and related medical conditions, lactation, breastfeeding, national origin, citizenship, age, disability, genetic information, veteran status, marital status, all as defined by applicable law, and any other legally protected status or characteristic in accordance with applicable federal, state and local laws. For further information, view the EEO Know Your Rights (English) poster or EEO Know Your Rights (Spanish) poster. Fraud prevention notice Prospective applicants should be vigilant against fraudulent job offers and interview requests. Scammers may use sophisticated tactics to impersonate Ascension employees. To ensure your safety, please remember: Ascension will never ask for payment or to provide banking or financial information as part of the job application or hiring process. Our legitimate email communications will always come from an @ascension.org email address; do not trust other domains, and an official offer will only be extended to candidates who have completed a job application through our authorized applicant tracking system. E-Verify statement Employer participates in the Electronic Employment Verification Program. Please click here for more information.