[Hiring] Principal Security Engineer @Avalon Administrative Services LLC

Role Description

The Principal Security Engineer serves as the organization's senior technical authority for cloud, application, data, and enterprise security, providing strategic leadership and engineering expertise in support of Avalon's information security, technology, and business objectives. This role is responsible for defining security architecture, establishing security engineering standards, identifying and mitigating systemic risk, and leading the design and implementation of enterprise security controls across a predominantly AWS-based healthcare technology environment.

The Principal Security Engineer partners closely with various teams to ensure security requirements are effectively integrated into technology solutions and operational processes. This position is responsible for translating regulatory, compliance, and organizational security requirements, including HITRUST and HIPAA standards, into scalable technical controls that support secure, reliable, and compliant business operations.

As a senior individual contributor and subject matter expert, the Principal Security Engineer leads complex security initiatives, drives the implementation of security controls and remediation efforts, and provides technical leadership to support secure, resilient, and compliant technology solutions across the organization.

This position is eligible for remote work, but quarterly travel will be required to Avalon’s corporate office located in Tampa, Florida.

Qualifications

• Minimum years of relevant work experience: 6+ years in security engineering, cloud engineering, infrastructure engineering, DevSecOps, or related disciplines.
• Required certification: None required.
• Significant hands-on experience securing production AWS environments.
• Deep understanding of AWS IAM, Organizations, SCPs, VPC networking, KMS, S3 and workload security.
• Experience securing EC2, containerized and serverless workloads.
• Strong understanding of network security, identity, encryption and secrets management.
• Experience with infrastructure-as-code such as Terraform or CloudFormation.
• Experience integrating security controls into CI/CD pipelines.
• Strong scripting or software automation capabilities.
• Experience with vulnerability management and security remediation.
• Experience with security monitoring, logging and incident investigation.
• Ability to independently analyze complex architectures and identify meaningful security risks.

Requirements

• Experience operating in a healthcare, financial services or similarly regulated environment.
• Practical experience with HITRUST and HIPAA.
• Experience securing Snowflake.
• Experience with AWS Security Hub, GuardDuty, CloudTrail, AWS Config and Control Tower.
• Experience with container security involving ECS, Fargate, EKS or Kubernetes.
• Experience with Datadog, SIEM platforms or enterprise observability systems.
• Experience with Harness or comparable CI/CD platforms.
• Experience with Tenable, CrowdStrike or similar vulnerability and endpoint security technologies.
• Experience designing multi-account AWS security architectures.
• Experience with AWS Backup, immutable storage and disaster-recovery security controls.
• Experience securing Bedrock, generative AI or self-hosted/open-weight AI models.
• Experience developing automated security remediation.
• AWS Security Specialty, AWS Solutions Architect Professional, CISM, CISSP or comparable certifications are beneficial but not required.

Benefits

• Avalon Healthcare Solutions is an Equal Opportunity Employer - Vet/Disability.
• This position description is subject to change at any time based upon business needs.