Senior Cloud Infrastructure Security EngineerThis role is based in the greater Seattle area at our office in Bellevue, Washington. #LI-onsiteWho We Need Truveta is rapidly building a talented and diverse team to tackle complex health and technical challenges. We are seeking candidates inspired by the opportunity to securely apply data in the development of real-world health solutions. Beyond core capabilities, we seek problem solvers, passionate and collaborative teammates, and those willing to roll up their sleeves while making a difference. We do things the right way. Our commitment to security and compliance assurance cannot be stressed enough. This position is critical to ensuring we are successful.
If you are interested in the opportunity to pursue purposeful work, join a mission-driven team, and build a rewarding career while having fun, Truveta may be the perfect fit for you.
This OpportunitySuccess in the healthcare industry is predicated on a foundation of trust. We demonstrate our trustworthiness as stewards of health data through three foundational pillars: security, privacy, and compliance.
Responsibilities: - Design and implement Azure cloud-based infrastructure, including using tools for infrastructure as code(IaC) and automation to meet technical, security and business needs.
- Design and implement Azure cloud environments (tenant, subscription, VM, storage account, databases, networking, firewalling) optimized for AI/ML workloads.
- Manage and maintain Azure Networking, Azure firewalls/VPN and associated policies/rules, Web Application Firewall, Application Gateway, Front Door, VNET peering, ensuring security, availability, scalability, and performance.
- Secure Azure Kubernetes clusters, containers, and images.
- Establish and enforce Azure security policies, manage access controls, and ensure the infrastructure complies with relevant regulations.
- Automate tenant and infrastructure provisioning, deployments, and other routine tasks to increase efficiency.
- Monitor Azure cloud resources, analyze performance, and troubleshoot issues as they arise.
- Perform incident troubleshoot and problem resolution for office network, cloud infrastructure, and own postmortems.
- Work with Engineering teams and external teams, gather requirements, develop and integrate cloud solutions and support business needs.
- Actively participate in architecture, code reviews, presentations, share learns and best practices to enable flawless deployment and quality operations.
- Evaluate and implement new security features/services/products to secure Truveta Azure infrastructure.
- Support innovation and cost management by developing new ideas for Azure cloud infrastructure and related tools.
- Interact with compliance team to deliver compliance certificates and remediate gaps during compliance finding and controls.
Key Qualifications:- A minimum bachelor's in Computer Science, Software Engineering, Electrical or Electronics Engineering, Information Systems, or equivalent
- 5+ years of experience in public cloud networking & security design, implementation & support
- Experience of TCP/IP IPv4/v6, office network (Routing/Switching/WAN, Wi-Fi & Security) management
- 5+ years of automation experience in Azure Cloud Networking / Azure DevOps or GitHub CI/CD pipelines in any of the following: Python, PowerShell, Terraform, Bicep, YAML template
- 5+ years of network security practices in on-premises and/or cloud environment
- Experience managing and supporting Windows Desktop OS, MacOS, managed endpoint administration at scale across an enterprise sized environment
- Understanding of the Windows Desktop/Mac OS packaging, scripting, and automated deployment tools, such as Microsoft Intune and Jamf.
- Ability to participate in on-call rotation
Preferred Qualifications - Experience in implementation & securing platforms/services in one or more public clouds (Azure, AWS, GCP)
- Self-starter with proven ability to develop creative solutions that enable customers and cost efficiency
- Interest and ability to research new and emerging technologies to better solve cloud infrastructure problems or improve security posture
- Certifications in Cloud/Network/Security (such as Azure AZ500, AZ700, Cisco CCNA/CCNP, Fortinet NSE 3-6, Palo Alto PCNSE, etc.)
We Offer:- Interesting and meaningful work for every career stage
- Great benefits package
- Comprehensive benefits with strong medical, dental and vision insurance plans
- 401K plan
- Professional development & training opportunities for continuous learning
- Work/life autonomy via flexible work hours and flexible paid time off
- Generous parental leave
- Regular team activities (virtual and in-person)
- The base pay for this position is $155,000 to $180,000. The pay range reflects the minimum and maximum target. Pay is based on several factors including location and may vary depending on job-related knowledge, skills, and experience. Certain roles are eligible for additional compensation such as incentive pay and stock options.
If you are based in California, we encourage you to read this important information for California residents linked here.
