Senior Cloud Security Engineer (AWS)

Techstack Ltd is hiring a Senior Cloud Security Engineer (AWS) for a US-based healthcare technology company. The role involves operating and securing AWS infrastructure, administering Microsoft 365, and managing security operations. The position offers remote work or hubs in Ukraine and Poland.

• Operate, secure, and troubleshoot AWS infrastructure across multiple accounts
• Administer Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Teams, SharePoint, and OneDrive
• Manage identity, access, endpoint compliance, and secure SaaS integrations
• Monitor security and service health, investigate alerts, and coordinate incident response
• Support backup, recovery, patching, capacity management, and infrastructure as code
• Maintain controls and audit-ready evidence for HIPAA, SOC 2, HITRUST, and other regulatory requirements
• Create automation, operational documentation, and runbooks
• Prepare clear handoffs to the US team at the end of each shift
• Participate in planned maintenance

• Experience working in a SOC 2-compliant organization, including at least one audit or assessment cycle
• Hands-on experience with MDR/SIEM tools
• Experience with tools similar to Cloudflare Zero Trust
• Hands-on AWS administration (AWS should be your strongest platform)
• 5+ years of experience in infrastructure engineering, systems administration, cloud operations, or security operations, with independent ownership of production systems
• Working-level experience with Microsoft 365 and Entra ID, plus a basic understanding of Intune
• Experience with Windows endpoints and Windows/Linux servers
• Strong troubleshooting skills across cloud infrastructure, networking, identity, and security
• Experience with incident response, endpoint security, vulnerability management, and patching
• Strong PowerShell and practical Python or Bash skills
• Good written English, independent ownership, and effective remote collaboration
• Ability to learn fast and fill knowledge gaps on your own
• Knowledge of HIPAA and HITRUST practices
• Hands-on experience with Cloudflare Zero Trust and Purview
• Deeper Intune and Windows Autopilot experience
• Terraform and/or CloudFormation
• Experience in healthcare, medical devices, or another regulated industry

• Flexible work format — remote work or one of our hubs in Kyiv, Lviv, Kharkiv, or Wrocław, plus flexible working hours
• Professional growth — Tech Guilds, mentoring, meetups, knowledge sharing, and other development opportunities
• Education support — 50% compensation for professional courses, trainings, webinars, and certifications
• English — free General English, Business English, and speaking clubs
• Time off — 20 paid days off and 7 paid sick days per year, plus additional days off
• Support — legal and accounting support
• Community — online and offline team activities, professional events, and appreciation gifts