HealthEdge

Design and maintain resilient AWS and hybrid cloud infrastructure including disaster recovery, security compliance, and CI/CD pipelines. | 5+ years cloud infrastructure engineering with AWS, Infrastructure as Code, containerization, Linux/Windows administration, and scripting. | Overview Overview: HealthEdge® offers AI-powered operational infrastructure for health insurance companies, guaranteeing an enduring financial edge in an increasingly competitive market. We're experiencing strong market momentum, with a growing number of health plans choosing HealthEdge to modernize their operations and compete more effectively. As we expand, we're investing in the people who power that growth, making this a pivotal moment to join us and shape the future of healthcare technology. Learn more at HealthEdge.com. We're looking for a Senior Cloud Infrastructure Engineer to own the design, resilience, and day-to-day health of HealthEdge's infrastructure across AWS and our hybrid on-prem/Azure/GCP estate. This role sits at the intersection of cloud engineering and infrastructure engineering spanning AWS migration execution, disaster recovery, patching and platform currency, and the security/compliance controls that keep our security obligations intact. It's a hands-on senior IC role for someone who wants deep ownership of infrastructure resilience across a large, multi-account, multi-platform environment that's actively migrating off legacy on-prem infrastructure. Areas of Responsibility: Infrastructure and Hybrid Cloud Architecture Design, build, and maintain infrastructure across AWS (primary), with supporting work in Azure and GCP, plus the on-prem estate still in active retirement Own infrastructure across the environments including secure configuration baselines and patch management for OS images and on-prem hardware Build and maintain reusable, auditable Infrastructure as Code for cloud deployments, and for remaining on-prem server deployment. Support cloud networking execution, VPC provisioning, security group standards, and related connectivity work. Manage storage across cloud and legacy on-prem storage as workloads migrate; contribute to on-prem retirement and datacenter decommissioning efforts. Support AWS migration execution for in-flight waves, including server deployments and resource change requests via IaC. Disaster Recovery & Resilience Own disaster recovery architecture and execution across cloud environments. Maintain DR solutions and backup strategy and run DR drills on a regular cadence; document gaps and drive remediation. Design for resilience from the start and treat recoverability as a first-class requirement, not an afterthought. Security, Compliance & Vulnerability Management Contribute to vulnerability management triage across infrastructure teams, threat detection, and infra security findings review. Support PHI/PII classification scanning, penetration test coordination, and security exception approvals. Maintain compliance controls; support HIPAA and SOC 2 audit readiness, access review and recertification, evidence collection, and change freeze coordination. Maintain EKS container runtime security sensor coverage as part of ongoing platform hardening. Cloud Infrastructure Operations Design and manage roles and cross-account access controls following least-privilege principles across multi-account, multi-cloud environments. Own cloud execution: load balancers, DNS (), VPC provisioning, and security group standards. Manage compute resources at scale with an eye toward right-sizing and long-term maintainability. Administer cloud storage and database services with attention to cost, performance, and resilience. Own infrastructure health, cost, and performance monitoring using native and third-party tooling, building the observability that lets issues surface before they become incidents. Administer and harden Linux and Windows Server environments across cloud and on-prem, including patching, performance tuning, troubleshooting, Active Directory integration, Group Policy, DNS, and certificate services. Manage hybrid identity and authentication across on-prem and cloud workloads, and maintain OS-level security baselines and hardening standards across the estate. CI/CD, Automation & Delivery Build and evolve CI/CD pipelines for secure, repeatable infrastructure deployments. Write automation to reduce manual toil and enforce operational consistency across cloud and on-prem environments. Take solutions from proof-of-concept to production with an eye toward long-term maintainability, not just getting it working once. Reliability, Monitoring & Incident Response Monitor, scale, and maintain production infrastructure with availability, performance, and security as top priorities. Participate in on-call rotation; serve as L2 escalation point for cross-team infrastructure support; lead root cause analysis and drive incident retrospectives to closure. Author and maintain runbooks that hold up under pressure, not just at handoff. Cost & Tagging Governance Contribute to FinOps efforts: identify and remediate cost anomalies, own tagging remediation against enterprise tagging standards, and make pragmatic cost/performance/resilience tradeoffs. AI-Enabled Engineering Use AI coding assistants to accelerate IaC development, scripting, and troubleshooting. Use AI tooling to draft first-pass runbooks, DR documentation, and incident retrospectives to validate and refine before publishing. Collaboration & Documentation Document architecture, DR runbooks, and standard operating procedures others can actually follow under pressure. Provide technical guidance to product teams on infrastructure resilience, migration sequencing, and recovery design. Required Qualifications 5+ years of hands-on cloud infrastructure engineering experience, with deep expertise in AWS and in other cloud environments. Direct experience with disaster recovery design and execution. Strong Infrastructure as Code experience (CDK, Terraform, or CloudFormation). Experience with containerized environments and Kubernetes/EKS, including version upgrade and lifecycle management. Linux and Windows Server administration experience, including patching and OS lifecycle management at scale. Solid IAM design experience, including cross-account access and least-privilege enforcement. Strong scripting ability (Python, Bash, or PowerShell). Experience building and maintaining CI/CD pipelines. Comfortable being the primary on-call and L2 escalation point for infrastructure incidents. Preferred Qualifications Experience operating in regulated environments (FedRAMP, HIPAA, SOC 2) and understanding of what that means for infrastructure and DR design specifically. AWS certification (Solutions Architect or SysOps, Associate or Professional). Experience with hybrid infrastructure, bridging on-prem virtualization with cloud-native services during active migration. Familiarity with DISA STIG or CIS benchmark hardening, and vulnerability management/triage workflows. FinOps or cost governance experience, including tagging standards enforcement. Healthcare technology or digital health platform background. Experience with AI-assisted engineering workflows as part of daily practice. Behaviors & Traits Raises risk early rather than waiting for it to become an incident. Comfortable with ambiguity in a large, multi-account, evolving cloud environment. Strong sense of ownership; closes gaps rather than escalating and waiting. Communicates technical tradeoffs clearly to both engineers and non-technical stakeholders. Geographic Responsibility: Remote, US Type of Employment: Full-time, permanent FLSA Classification (USA Only): Exempt Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job: The employee is occasionally required to move around the office. Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus. Work across multiple time zones in a hybrid or remote work environment. Long periods of time sitting and/or standing in front of a computer using video technology. May require travel dependent on company needs. The above statements are intended to describe the general nature and level of the job being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. HealthEdge reserves the right to modify, add, or remove duties and to assign other duties as necessary. In addition, reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position in compliance with the Americans with Disabilities Act of 1990. Candidates may be required to go through a pre-employment criminal background check. HealthEdge is an equal opportunity employer. We are committed to workforce diversity and actively encourage all qualified persons to seek employment with us, including, but not limited to, racial and ethnic minorities, women, veterans and persons with disabilities. #LI-Remote **The annual US base salary range for this position is $110,000 to $118,000. This salary range may cover multiple career levels at HealthEdge. Final compensation will be determined during the interview process and is based on a combination of factors including, but not limited to, your skills, experience, qualifications and education.

Manage governance routines, strategic initiatives, and risk frameworks to ensure compliance integration and monitor performance. | Bachelor's degree and 5+ years in compliance, governance, or risk management with strong organizational and communication skills. | Overview Overview: The Compliance Manager, Governance and Enablement will serve as the operational integrator of the HealthEdge Compliance and Privacy Department. This role will enable the execution of Compliance and Privacy strategy by coordinating governance, managing strategic initiatives, supporting enterprise risk management, facilitating reporting, and ensuring accountability across the department. Importantly, this role will also operate a coordinated Compliance control system through effective governance, communication, program management and operational discipline. Your Impact: Managing governance forums, agendas, decision logs, and action tracking, in addition to corresponding governance documentation, including policies, procedures, standards, control documentation, process maps, playbooks, training materials, and reporting templates. Supporting execution of strategic departmental priorities from planning through implementation Monitoring cross-functional dependencies and escalation of risks to leadership Supports the development, implementation, and ongoing management of compliance governance frameworks, routines, and operating practices. Partners with business, compliance, legal, and operations teams to ensure compliance requirements are understood and embedded into business processes. Coordinate departmental KPIs and executive dashboarding and monitor departmental performance against strategic objectives Help support critical Compliance channels of communication including SharePoint, hotline, and multiple email channels Identify opportunities to improve governance processes and operational efficiency Support development of standardized workflows, templates, and operating procedures by broadly promoting consistency and continuous improvement across the Compliance and Privacy organization. Collaborates with stakeholders to simplify and standardize compliance processes where possible. Supports change management and communication efforts related to new or changing compliance requirements. Promotes a culture of accountability, transparency, risk awareness, and compliance ownership. What you bring: Ability to interpret compliance requirements and translate them into practical business processes. Ability to manage governance routines, action logs, deliverables, and stakeholder follow-up. Strong written and verbal communication skills, including the ability to summarize complex information clearly. Ability to build trusted relationships with business, compliance, legal, and operational stakeholders. Strong organizational skills and ability to manage multiple priorities and deadlines. Ability to develop clear templates, process documentation, job aids, and reporting materials. Ability to influence without direct authority and drive accountability across teams. Ability to maintain confidentiality and handle sensitive information appropriately. Knowledge examples: Working knowledge of regulatory and operational compliance governance, risk management, audit readiness, and internal controls. Understanding of issue management, corrective action planning, remediation tracking, and root cause analysis. Familiarity with compliance reporting, metrics, dashboards, and executive-level status updates. Knowledge of change management and communication practices. Familiarity with healthcare, claims, payer operations, HR, technology, or shared services compliance environments preferred, depending on business area. Proficiency with Microsoft Office tools, including Excel, PowerPoint, Word, Teams, and SharePoint. Familiarity with workflow, audit, risk, project management, or reporting tools such as Smartsheet, Jira, Power BI, or similar platforms preferred. Required qualifications: Bachelor’s degree in Business, Healthcare Administration, Compliance, Risk Management, Human Resources, Operations, or related field, or equivalent work experience. Typically requires 5+ years of experience in compliance, governance, risk management, operations, audit, quality, project management, or a related function. Experience supporting compliance governance routines, issue tracking, documentation, reporting, or audit readiness activities. Strong communication, organization, stakeholder management, and follow-through skills. Demonstrated ability to manage multiple priorities, track deliverables, and meet deadlines. Experience working cross-functionally with business, compliance, legal, audit, risk, or operational teams. Preferred Qualifications: Certification through accredited Compliance organization such as the Society for Corporate Compliance and Ethics (ie: CCEP), or the Health Care Compliance Association (ie: CHC) Experience in healthcare, managed care, payer operations, shared services, HR operations, or regulated business environments. Experience supporting client audits, regulatory reviews, internal audits, compliance assessments, or corrective action plans. Experience developing governance materials, dashboards, executive summaries, training materials, or process documentation. Knowledge of compliance frameworks, risk management practices, internal controls, and evidence management. Project management, process improvement, compliance, audit, or risk-related certification preferred but not required. Geographic Responsibility: Remote, US Type of Employment: Full-time, permanent FLSA Classification (USA Only): Exempt Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job: The employee is occasionally required to move around the office. Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus. Work across multiple time zones in a hybrid or remote work environment. Long periods of time sitting and/or standing in front of a computer using video technology. May require travel dependent on company needs. The above statements are intended to describe the general nature and level of the job being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. HealthEdge reserves the right to modify, add, or remove duties and to assign other duties as necessary. In addition, reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position in compliance with the Americans with Disabilities Act of 1990. Candidates may be required to go through a pre-employment criminal background check. HealthEdge is an equal opportunity employer. We are committed to workforce diversity and actively encourage all qualified persons to seek employment with us, including, but not limited to, racial and ethnic minorities, women, veterans and persons with disabilities. #LI-Remote **The annual US base salary range for this position is $100,000 to $115,000. This salary range may cover multiple career levels at HealthEdge. Final compensation will be determined during the interview process and is based on a combination of factors including, but not limited to, your skills, experience, qualifications and education.

Manage identity and access provisioning in AWS using Infrastructure as Code and enforce least-privilege policies. | 2-4 years AWS cloud security/IAM experience, Infrastructure as Code skills, and strong communication in a regulated environment. | Overview About HealthEdge: HealthEdge offers AI-powered operational infrastructure for health insurance companies, guaranteeing an enduring financial edge in an increasingly competitive market. We're experiencing strong market momentum, with a growing number of health plans choosing HealthEdge to modernize their operations and compete more effectively. As we expand, we're investing in the people who power that growth, making this a pivotal moment to join us and shape the future of healthcare technology. Learn more at HealthEdge.com. HealthEdge's mission is to revolutionize healthcare through transaction automation and the enablement of real-time business and clinical engagement among healthcare payers, providers, and patients. Our team works to deliver technology that powers some of the most complex health plan organizations in the country - organizations responsible for the care and coverage of millions of members. Our product portfolio - HealthRules Payer, GuidingCare, Wellframe, and Source - addresses the full spectrum of payer operations, from core administrative processing to care management and member engagement. We are growing, we are building, and we are looking for people who want to grow and build alongside us. If you are looking for a role where your work has direct relevance to how healthcare gets delivered, and where your development is taken seriously, HealthEdge is that place. HealthEdge is committed to an inclusive workplace where every employee has the opportunity to belong, make an impact, and do the best work of their career. We welcome candidates of all backgrounds, experiences, and perspectives. Position Overview: We'reseeking a Cloud IAM Operations Engineer to manage day-to-day identity and access provisioning across our AWS environment. This is a hands-on, execution-focused role;you'llreview incoming access requests against least-privilege principles and implement approved access using Infrastructure as Code. This roleoperatesin alignment withestablished policy rather than defining it, andyou'llpartner closely with security architecture on escalations and edge cases. Responsibilities: • Review AWS access requests against least-privilege and organizational access policy • Provision and implement approved access using Infrastructure as Code (CDK preferred; or similarIaCtools considered) • Manage andmaintainthe organization's Just-In-Time (JIT) access management tool, ensuring all human-use AWS access is provisioned on-demand through JIT workflows rather thanpersistentpermissions, reinforcing least-privilege and audit readiness • Maintainaccurate, auditable records of access grants, changes, and revocations • Identifyand escalate access requests that fall outside standard policy or carry elevated risk • Support periodic access reviews and recertification processes • Contribute to runbooks and documentation to improve consistency and repeatability of the access request lifecycle • Partner with security architecture and IAM leadership on process improvements and automation opportunities • Conduct periodic reviews of AWS IAM permission sets using IAM Access Analyzerand othertoolingtoidentifyunused permissions and overly permissive policies, refining access controls to align with least-privilege principles across the environments. What you bring: 2-4 years of experience in cloud security, IAM, or cloud technologies in AWS Working experience with AWS IAM fundamentals (roles, policies,permission sets,least-privilege design) This is a people-facing role, and the ideal candidate will bring strong interpersonal and communication skills alongside relevant technical experience. Working experience with Infrastructure as Code (CDK preferred; Pulumi, or CloudFormation also considered) Understanding of access review and audit requirements in a regulated environment Working experience implementing or administering Just-In-Time (JIT) access management tools in a cloud environment, with a strong understanding of least-privilege access principles and standing-access risk reduction Strong attention to detail and sound judgment on what access should andshouldn'tbe granted Clear written communication for documentation and access decision records Preferred Experience Experience in a healthcare or other regulated industry (HIPAA/HITRUST-aware) Familiarity with identity governance tooling and access certification workflows Basic scripting ability (Python, TypeScript, or similar) to supportIaCworkflows Geographic Responsibility: Remote, US Type of Employment: Full-time, permanent FLSA Classification (USA Only): Exempt Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job: • The employee is occasionally required to move around the office. Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus. • Work across multiple time zones in a hybrid or remote work environment. • Long periods of time sitting and/or standing in front of a computer using video technology. • May require travel dependent on company needs. The above statements are intended to describe the general nature and level of the job being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. HealthEdge reserves the right to modify, add, or remove duties and to assign other duties as necessary. In addition, reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position in compliance with the Americans with Disabilities Act of 1990. Candidates may be required to go through a pre-employment criminal background check. HealthEdge is an equal opportunity employer. We are committed to workforce diversity and actively encourage all qualified persons to seek employment with us, including, but not limited to, racial and ethnic minorities, women, veterans and persons with disabilities. #LI-Remote • *The annual US base salary range for this position is $107,000 to $114,000. This salary range may cover multiple career levels at HealthEdge. Final compensation will bedeterminedduring the interview process and is based on a combination of factors including, but not limited to,your skills, experience,qualificationsand education. Employment Type: FULL_TIME

Manage AWS identity and access provisioning using Infrastructure as Code following least-privilege principles. | 2-4 years cloud security/IAM experience with AWS IAM fundamentals and Infrastructure as Code skills. | Overview About HealthEdge: HealthEdge offers AI-powered operational infrastructure for health insurance companies, guaranteeing an enduring financial edge in an increasingly competitive market. We're experiencing strong market momentum, with a growing number of health plans choosing HealthEdge to modernize their operations and compete more effectively. As we expand, we're investing in the people who power that growth, making this a pivotal moment to join us and shape the future of healthcare technology. Learn more at HealthEdge.com. HealthEdge's mission is to revolutionize healthcare through transaction automation and the enablement of real-time business and clinical engagement among healthcare payers, providers, and patients. Our team works to deliver technology that powers some of the most complex health plan organizations in the country - organizations responsible for the care and coverage of millions of members. Our product portfolio - HealthRules Payer, GuidingCare, Wellframe, and Source - addresses the full spectrum of payer operations, from core administrative processing to care management and member engagement. We are growing, we are building, and we are looking for people who want to grow and build alongside us. If you are looking for a role where your work has direct relevance to how healthcare gets delivered, and where your development is taken seriously, HealthEdge is that place. HealthEdge is committed to an inclusive workplace where every employee has the opportunity to belong, make an impact, and do the best work of their career. We welcome candidates of all backgrounds, experiences, and perspectives. Position Overview: We'reseeking a Cloud IAM Operations Engineer to manage day-to-day identity and access provisioning across our AWS environment. This is a hands-on, execution-focused role;you'llreview incoming access requests against least-privilege principles and implement approved access using Infrastructure as Code. This roleoperatesin alignment withestablished policy rather than defining it, andyou'llpartner closely with security architecture on escalations and edge cases. Responsibilities: • Review AWS access requests against least-privilege and organizational access policy • Provision and implement approved access using Infrastructure as Code (CDK preferred; or similarIaCtools considered) • Manage andmaintainthe organization's Just-In-Time (JIT) access management tool, ensuring all human-use AWS access is provisioned on-demand through JIT workflows rather thanpersistentpermissions, reinforcing least-privilege and audit readiness • Maintainaccurate, auditable records of access grants, changes, and revocations • Identifyand escalate access requests that fall outside standard policy or carry elevated risk • Support periodic access reviews and recertification processes • Contribute to runbooks and documentation to improve consistency and repeatability of the access request lifecycle • Partner with security architecture and IAM leadership on process improvements and automation opportunities • Conduct periodic reviews of AWS IAM permission sets using IAM Access Analyzerand othertoolingtoidentifyunused permissions and overly permissive policies, refining access controls to align with least-privilege principles across the environments. What you bring: 2-4 years of experience in cloud security, IAM, or cloud technologies in AWS Working experience with AWS IAM fundamentals (roles, policies,permission sets,least-privilege design) This is a people-facing role, and the ideal candidate will bring strong interpersonal and communication skills alongside relevant technical experience. Working experience with Infrastructure as Code (CDK preferred; Pulumi, or CloudFormation also considered) Understanding of access review and audit requirements in a regulated environment Working experience implementing or administering Just-In-Time (JIT) access management tools in a cloud environment, with a strong understanding of least-privilege access principles and standing-access risk reduction Strong attention to detail and sound judgment on what access should andshouldn'tbe granted Clear written communication for documentation and access decision records Preferred Experience Experience in a healthcare or other regulated industry (HIPAA/HITRUST-aware) Familiarity with identity governance tooling and access certification workflows Basic scripting ability (Python, TypeScript, or similar) to supportIaCworkflows Geographic Responsibility: Remote, US Type of Employment: Full-time, permanent FLSA Classification (USA Only): Exempt Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job: • The employee is occasionally required to move around the office. Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus. • Work across multiple time zones in a hybrid or remote work environment. • Long periods of time sitting and/or standing in front of a computer using video technology. • May require travel dependent on company needs. The above statements are intended to describe the general nature and level of the job being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. HealthEdge reserves the right to modify, add, or remove duties and to assign other duties as necessary. In addition, reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position in compliance with the Americans with Disabilities Act of 1990. Candidates may be required to go through a pre-employment criminal background check. HealthEdge is an equal opportunity employer. We are committed to workforce diversity and actively encourage all qualified persons to seek employment with us, including, but not limited to, racial and ethnic minorities, women, veterans and persons with disabilities. #LI-Remote • *The annual US base salary range for this position is $107,000 to $114,000. This salary range may cover multiple career levels at HealthEdge. Final compensation will bedeterminedduring the interview process and is based on a combination of factors including, but not limited to,your skills, experience,qualificationsand education. Employment Type: FULL_TIME