Senior Cloud Infrastructure Security Engineer

<p style="text-align: center;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>Senior Cloud Infrastructure Security Engineer</strong></span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Truveta is the world’s first health provider led data platform with a vision of Saving Lives with Data. Our mission is to enable researchers to find cures faster, empower every clinician to be an expert, and help families make the most informed decisions about their care. Achieving Truveta’ s ambitious vision requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our <a href="https://www.truveta.com/careers/">company values</a>.</span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>This role is based in the greater Seattle area at our office in Bellevue, Washington. <span style="color: rgb(255, 255, 255);">#LI-onsite</span></strong></span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>Who We Need </strong></span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Truveta is rapidly building a talented and diverse team to tackle complex health and technical challenges. We are seeking candidates inspired by the opportunity to securely apply data in the development of real-world health solutions. Beyond core capabilities, we seek problem solvers, passionate and collaborative teammates, and those willing to roll up their sleeves while making a difference.  We do things the right way. Our commitment to security and compliance assurance cannot be stressed enough. This position is critical to ensuring we are successful.</span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":0,"335559740":240}"> </span></span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">If you are interested in the opportunity to pursue purposeful work, join a mission-driven team, and build a rewarding career while having fun, Truveta may be the perfect fit for you. </span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":0,"335559740":240}"> </span></span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>This Opportunity</strong></span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span class="TextRun SCXW254577667 BCX8" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW254577667 BCX8">Success in the healthcare industry is predicated on a foundation of trust. We </span><span class="NormalTextRun SCXW254577667 BCX8">demonstrate</span><span class="NormalTextRun SCXW254577667 BCX8"> our trustworthiness as stewards of health data through three foundational pillars: security, privacy, and compliance.  </span></span><span class="EOP Selected SCXW254577667 BCX8" data-ccp-props="{"134233117":true,"134233118":true,"201341983":0,"335559740":240}"> </span> </span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>Responsibilities: </strong></span></p>
<ul>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Design and implement Azure cloud-based infrastructure, including using tools for infrastructure as code(IaC) and automation to meet technical, security and business needs.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Design and implement Azure cloud environments (tenant, subscription, VM, storage account, databases, networking, firewalling) optimized for AI/ML workloads.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Manage and maintain Azure Networking, Azure firewalls/VPN and associated policies/rules, Web Application Firewall, Application Gateway, Front Door, VNET peering, ensuring security, availability, scalability, and performance.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Secure Azure Kubernetes clusters, containers, and images.</span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Establish and enforce Azure security policies, manage access controls, and ensure the infrastructure complies with relevant regulations.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Automate tenant and infrastructure provisioning, deployments, and other routine tasks to increase efficiency.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Monitor Azure cloud resources, analyze performance, and troubleshoot issues as they arise.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Perform incident troubleshoot and problem resolution for office network, cloud infrastructure, and own postmortems.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Work with Engineering teams and external teams, gather requirements, develop and integrate cloud solutions and support business needs.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Actively participate in architecture, code reviews, presentations, share learns and best practices to enable flawless deployment and quality operations.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Evaluate and implement new security features/services/products to secure Truveta Azure infrastructure.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Support innovation and cost management by developing new ideas for Azure cloud infrastructure and related tools.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Interact with compliance team to deliver compliance certificates and remediate gaps during compliance finding and controls.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
</ul>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>Key Qualifications:</strong></span></p>
<ul>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">A minimum bachelor’s in Computer Science, Software Engineering, Electrical or Electronics Engineering, Information Systems, or equivalent</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">5+ years of experience in public cloud networking & security design, implementation & support</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Experience of TCP/IP IPv4/v6, office network (Routing/Switching/WAN, Wi-Fi & Security) management</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">5+ years of automation experience in Azure Cloud Networking / Azure DevOps or GitHub CI/CD pipelines in any of the following: Python, PowerShell, Terraform, Bicep, YAML template</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">5+ years of network security practices in on-premises and/or cloud environment</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Experience managing and supporting Windows Desktop OS, MacOS, managed endpoint administration at scale across an enterprise sized environment</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Understanding of the Windows Desktop/Mac OS packaging, scripting, and automated deployment tools, such as Microsoft Intune and Jamf.</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Ability to participate in on-call rotation</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
</ul>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>Preferred Qualifications </strong></span></p>
<ul>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Experience in implementation & securing platforms/services in one or more public clouds (Azure, AWS, GCP) </span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Self-starter with proven ability to develop creative solutions that enable customers and cost efficiency</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Interest and ability to research new and emerging technologies to better solve cloud infrastructure problems or improve security posture</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span data-contrast="none">Certifications in Cloud/Network/Security (such as Azure AZ500, AZ700, Cisco CCNA/CCNP, Fortinet NSE 3-6, Palo Alto PCNSE, etc.)</span><span data-ccp-props="{"201341983":0,"335559738":60,"335559739":0,"335559740":300}"> </span></span></li>
</ul>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>Why Truveta?</strong></span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Be a part of building something special. Now is the perfect time to join Truveta. We have strong, established leadership with decades of success. We are well-funded. We are building a culture that prioritizes people and their passions across personal, professional, and everything in between. Join us as we build an amazing company together.</span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>We Offer:</strong></span></p>
<ul>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Interesting and meaningful work for every career stage</span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Great benefits package</span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Comprehensive benefits with strong medical, dental and vision insurance plans</span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">401K plan</span></li>
<li class="li1" style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Professional development & training opportunities for continuous learning</span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Work/life autonomy via flexible work hours and flexible paid time off</span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Generous parental leave</span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Regular team activities (virtual and in-person)</span></li>
<li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">The base pay for this position is $155,000 to $180,000. The pay range reflects the minimum and maximum target. Pay is based on several factors including location and may vary depending on job-related knowledge, skills, and experience. Certain roles are eligible for additional compensation such as incentive pay and stock options.</span></li>
</ul>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><em>If you are based in California, we encourage you to read this important information for California residents </em><a href="https://truvetaexternal.sharepoint.com/:b:/s/HR/EdHvOayMeqVCr4r3AHzGRZ8BP_gNgn8GJlP3kpmzCS0W8g?e=3bimck"><em>linked</em> <em>here.</em></a></span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contractors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all of the requirements.</span></p>
<p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong><span data-teams="true">Please note that all applicants must be authorized to work in the United States for any employer as we are unable to sponsor work visas or permits (e.g. F-1 OPT, H1-B) at this time. We appreciate your interest in the position and encourage you to explore future opportunities with us.</span></strong></span></p>
<p> </p>