Cloud Security Engineer (Remote)

REMOTE OR BOSTON, MA /ENGINEERING – INFRASTRUCTURE /FULL-TIME/ REMOTE

Arcadia is dedicated to happier, healthier days for all. We transform diverse data into a unified fabric for health. Our platform delivers actionable insights for our customers to advance care and research, drive strategic growth, and achieve financial success. For more information, visit arcadia.io.

Why This Role Is Important To Arcadia

Arcadia’s Security Engineers spearhead our efforts to protect our clients’ data, guided by an industry-leading security program. Building and supporting security solutions aimed at fortifying Arcadia’s cloud SaaS infrastructure, the ideal candidate combines information security expertise with aligned technical capabilities to assess, design, and implement controls across a cloud-based infrastructure. Security Engineers support ongoing compliance efforts and certification/recertification of industry-best security frameworks including ISO27001, HITRUST, and SOC-2 while operating and implementing new technical controls to meet Arcadia’s evolving products and security challenges. 

What Success Looks Like

In 3 months

- Demonstrating a clear understanding of Arcadia’s policies and procedures for AWS cloud infrastructure

- Developing competency around day-to-day upkeep of MDR, AV, and firewall services

- Beginning planning and execution of longer-term project-based work around security tooling and monitoring

In 6 months

- Demonstrating holistic knowledge of Arcadia’s product suite and security components, logging, and able to identify gaps in security delivery

- Progressing on automating key security components into auto-build, quarterly maintenance, and other time-based security controls

- Deep understanding of interconnectivity between AWS microservices, EC2 based workloads, and customer networks

In 12 months

- Expert in Arcadia technical security controls, regularly updating documentation and training new hires

- Providing technical input into planned and future project-based work

- Executing new security technology improvements through product demos, proof-of-concepts, and upgrades to existing solutions

What You’ll Be Doing

• Securing Arcadia clients’ data from unauthorized access across all Arcadia product offerings
• Seeking and destroying vulnerabilities to keep our server- and serverless-based systems protected
• Establishing client connectivity via encrypted connections like IPsec, SSLVPN, NAT/PAT
• Constructing automated, scalable perimeter security solutions using AWS and Enterprise security tools
• Solving security “design puzzles” and collaborate with security analysts/leadership for compliance with industry certifications such as ISO27001, HITRUST
• Managing Arcadia’s secrets, certificates, and PKI components to ensure data is protected throughout the product development and customer implementation processes
• Integrating with DevOps and software engineers to pre-bake security (encryption, logging, monitoring, auditing) into new products, modules, and processing architecture
• Creating and maintaining documentation and training materials for Secops policies, procedures, and software/security best-practices

What You'll Bring

• Deep understanding and recent experience with cloud security concepts, in particular with AWS, IAM management, container security, infrastructure security architecture
• Experience with the design and implementation of Enterprise based security – IDS/IPS, SIEM, Vulnerability Management, etc.
• Expert at managing and securing Enterprise Windows, Linux, and MS SQL Server environments
• Should be comfortable across the primary AWS service stack, with experience securing server and container-based workloads
• Strong experience using encryption/decryption, federation; - TLS, PGP, SSH, TDE, AWS-KMS, SAML
• Proficiency configuring virtual/physical perimeter security devices
• Comfortable using code to automate processes and drive results – powershell, python, bash, java, t-sql
• Familiarity with healthcare information security certifications and regulations such as HITRUST, 201 CMR 17

Would Love For You To Have

• AWS Certified Solutions Architect, AWS Certified Security Specialist or similar certifications preferred, CCSP or CISSP  
• Palo Alto Networks certifications
• Microsoft Certified System Administrator/Engineer
• Experience managing Active Directory, Multifactor Auth, Single Sign-On in a multi-tier web-application infrastructure
• Azure or GCP experience is a nice add-on

What You'll Get

• You will have the opportunity to work with cutting edge cloud technology to ensure the security of mission critical healthcare data
• You will design, implement, and maintain security solutions in a heavily regulated environments in the cloud
• You will work with a team of experts in building and maintaining a highly validated security and privacy program for the leader in Population Health and Healthcare data analytics including experience with certifications such as HITRUST, ISO 27001, and SOC 2
• Be a part of a team and organization that has built security and privacy into the fabric and culture of the organization
• Be a part of a mission-driven company that is transforming the healthcare industry by changing the way patients receive care
• A flexible, remote-friendly company with personality and heart
• Employee driven programs and initiatives for personal and professional development
• Be a member of the Arcadian and Barkadian Community

About Arcadia

Arcadia.io helps innovative healthcare systems and health plans around the country transform healthcare to reduce cost while improving patient health.  We do this by aggregating massive amounts of clinical and claims data, applying algorithms to identify opportunities to provide better patient care, and making those opportunities actionable by physicians at the point of care in near-real time. We are passionate about helping our customers drive meaningful outcomes. We are growing fast and have emerged as the market leader in the highly competitive population health management software and value-based care services markets, and we have been recognized by industry analysts KLAS, IDC, Forrester and Chilmark for our leadership. For a better sense of our brand and products, please explore our website, our online resources, and our interactive Data Gallery.

This position is responsible for following all Security policies and procedures in order to protect all PHI under Arcadia's custodianship as well as Arcadia Intellectual Properties. For any security-specific roles, the responsibilities would be further defined by the hiring manager.