Cloud & Security Engineer

Novacis Digital is hiring a Senior Cloud / Security Engineer to design, secure, automate, and operate cloud infrastructure across Microsoft Azure and/or AWS for enterprise healthcare, AI, and digital technology workloads.

Responsibilities

• Design, build, and operate secure cloud infrastructure in Microsoft Azure and/or AWS for enterprise healthcare applications
• Implement Infrastructure as Code using Terraform, Bicep, CloudFormation, or equivalent tooling with reusable modules and controlled promotion across environments
• Build and maintain CI/CD pipelines using Azure DevOps, GitHub Actions, Jenkins, or similar platforms
• Deploy and manage containerized workloads using Docker, Kubernetes, AKS, EKS, or related cloud-native services
• Implement DevSecOps security controls including SAST, DAST, dependency scanning, container scanning, secrets detection, policy-as-code, and vulnerability remediation
• Engineer secure cloud networking including VNets/VPCs, subnets, routing, private endpoints, load balancers, DNS, firewalls, VPNs, and certificate management
• Implement identity and access controls using Microsoft Entra ID, Azure RBAC, AWS IAM, managed identities, key management, and least-privilege principles
• Establish centralized logging, metrics, tracing, alerting, security monitoring, and operational dashboards
• Support patching, backup, disaster recovery, capacity planning, cost optimization, incident response, and root-cause analysis
• Maintain architecture diagrams, security documentation, operating procedures, deployment standards, and environment configuration baselines

Requirements

• 3-5 years of experience in Cloud Engineering, DevOps, DevSecOps, Security Engineering, Site Reliability Engineering, or Infrastructure Engineering
• Strong hands-on experience with Microsoft Azure and/or AWS in production environments
• Strong experience with Terraform or equivalent Infrastructure as Code tooling
• Hands-on experience with Docker, Kubernetes, AKS/EKS, container registries, ingress, and workload deployment
• Strong CI/CD experience with Azure DevOps, GitHub Actions, Jenkins, GitLab CI, or similar tools
• Strong understanding of Linux, networking, DNS, TLS/certificates, load balancing, storage, compute, and cloud security fundamentals
• Experience with Python, Bash, PowerShell, or similar scripting and automation languages
• Experience implementing IAM, RBAC, secrets management, key management, secure configuration, and vulnerability management
• Strong troubleshooting, documentation, and cross-functional communication skills

Technologies

• Microsoft Azure, AWS
• Terraform, Bicep, CloudFormation, Infrastructure as Code
• Azure DevOps, GitHub Actions, Jenkins, GitLab CI, CI/CD pipelines
• Docker, Kubernetes, AKS, EKS, container registries, ingress
• SAST, DAST, policy-as-code, VNets, VPCs, private endpoints
• Load balancers, DNS, firewalls, VPNs, certificate management
• Microsoft Entra ID, Azure RBAC, AWS IAM, managed identities, key management, least-privilege
• Linux, TLS/certificates
• Python, Bash, PowerShell
• Centralized logging, metrics, tracing, alerting, security monitoring
• Architecture diagrams, disaster recovery, incident response, root-cause analysis

Benefits

• Competitive salary (USD 80,000 - 100,000 per year)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Preferred Skills

• Experience with Azure Government, AWS GovCloud, FedRAMP-aligned environments, or government cloud workloads
• Knowledge of NIST 800-53, FISMA, Zero Trust, HIPAA, SOC 2, or similar security and compliance frameworks
• Experience supporting healthcare, federal, AI/ML, intelligent document processing, data analytics, or case management platforms
• Experience with Azure Monitor, Application Insights, CloudWatch, Prometheus, Grafana, ELK/OpenSearch, or SIEM tooling
• Azure, AWS, Kubernetes, Terraform, or cybersecurity certifications

Location

• Atlanta, GA (hybrid)