Cloud Security Engineer

📋 Job Overview

ClearView Healthcare Partners is a premier life sciences strategy consulting firm headquartered in Boston, with offices in San Francisco, New York City, London, Zurich and Gurgaon. Serving clients in the biopharmaceutical, medical device, and diagnostic spaces, we provide world-class strategic decision-making support across a diverse range of business issues. Our goal is to inform actionable recommendations that allow companies to achieve their business objectives.

ClearView is in the process of migrating a significant portion of its local, on-premises resources to the cloud, and this role will be a key player in ensuring that migration happens securely and that our Azure environment is configured and governed to a high standard. ClearView is looking for a Cloud Security-focused Information Security Professional to join our Information Technology team. This role will be responsible for three main areas: Cloud Security Architecture & Operations (with an emphasis on Azure), SIEM engineering, and Monitoring/Testing to ensure compliance. This position requires the ability to work with minimal direction, flexibility to changing demands, and having an eye for process improvement. This position will work in our India office but will be responsible for ClearView's Information Security globally.

🏢 About ClearView Healthcare Partners

ClearView Healthcare Partners is a premier life sciences strategy consulting firm headquartered in Boston, with offices in San Francisco, New York City, London, Zurich and Gurgaon. Serving clients in the biopharmaceutical, medical device, and diagnostic spaces, we provide world-class strategic decision-making support across a diverse range of business issues. Our goal is to inform actionable recommendations that allow companies to achieve their business objectives.

🎯 The Role

ClearView is in the process of migrating a significant portion of its local, on-premises resources to the cloud, and this role will be a key player in ensuring that migration happens securely and that our Azure environment is configured and governed to a high standard. ClearView is looking for a Cloud Security-focused Information Security Professional to join our Information Technology team. This role will be responsible for three main areas: Cloud Security Architecture & Operations (with an emphasis on Azure), SIEM engineering, and Monitoring/Testing to ensure compliance. This position requires the ability to work with minimal direction, flexibility to changing demands, and having an eye for process improvement. This position will work in our India office but will be responsible for ClearView's Information Security globally.

✅ Key Responsibilities

• Support the security workstream of ClearView's ongoing migration of on-premises resources to the cloud, helping ensure new Azure workloads are designed and configured securely from the outset.
• Help configure, monitor, and continuously improve security controls in Azure (with secondary support for AWS), including Defender for Cloud, Security Hub/GuardDuty, IAM, Network Security Groups (NSGs), and baseline configurations.
• Support identity governance in Microsoft Entra ID (Azure AD), including conditional access, privileged role assignments, and application/service principal reviews.
• Assist with authoring, deploying, and monitoring Azure Policy definitions and initiatives to enforce configuration standards and compliance guardrails across subscriptions.
• Support cloud security posture management (CSPM) efforts, identifying and remediating misconfigurations across Azure and AWS environments.
• Assist with design and review of cloud architecture for security best practices, including network segmentation (NSGs, firewalls), least-privilege IAM, and encryption at rest and in transit.
• Support secrets and key management practices using Azure Key Vault, including access policy reviews, rotation, and integration with applications and pipelines.
• Help assess and improve the security of containerized workloads (e.g., image scanning, registry access controls, AKS/container runtime configuration) as more services move to container-based architectures.
• Assist with periodic reviews of access controls, MFA configurations, and conditional access policies across cloud and on-prem environments.
• Support vulnerability management activities by collecting scan results, tracking remediation status, and validating fixes with relevant teams.
• Contribute to standard build/hardening checklists for cloud resources, servers, and laptops, and verify that new systems are deployed according to these baselines.

📌 Required Qualifications

• Bachelor's degree in technical, information security, or related discipline, or equivalent practical experience.
• 4–7 years of relevant security experience, with meaningful exposure to cloud environments (Azure and/or AWS).
• Strong technical aptitude with a primary interest in cloud security, alongside familiarity with security operations and endpoint protection.
• Experience with core Azure security services strongly preferred, such as Microsoft Entra ID, Network Security Groups (NSGs), Azure Key Vault, and Azure Policy.
• Exposure to securing containerized environments (e.g., image scanning, AKS/container runtime security) is a plus.
• Comfortable working with cloud consoles, logs, dashboards, and basic scripting or automation tools to troubleshoot and analyze issues.
• AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Security+, or other relevant information security certifications.
• Demonstrates strong problem solving, analytical, interpersonal, and ownership skills.
• Possesses excellent collaboration skills for work with various internal team members.

⭐ Desirable Experience

• A broad understanding of how to secure cloud environments end to end — identity, network, data, and workload layers — rather than deep expertise in a single area.
• An understanding of cloud security concepts, encryption, system hardening, defense-in-depth designs, advanced persistent threats, anomaly detection, and next-generation platforms.
• Working knowledge and experience with any of the following: Microsoft Entra ID, Network Security Groups (NSGs), Azure Key Vault, Azure Policy, cloud IAM/PAM more broadly, Infrastructure-as-Code security scanning (Terraform, CloudFormation), container/Kubernetes security, CSPM/SOC tools, and cloud logging (Azure Monitor, CloudTrail).
• Interest or prior experience supporting cloud migration initiatives, ideally with an eye toward building security in from the start rather than retrofitting it.
• Familiarity with traditional security technologies is a plus: VA, SIEM, DLP, IPS/IDS, MFA, VPN, FW, IDS, Wireless, ACLs, and port scanning.
• Cloud-native monitoring/log analysis experience preferred; experience with a SIEM platform (e.g., Splunk) is a plus but not required.
• Working knowledge of Windows endpoints; familiarity with macOS or basic networking concepts is a plus.
• Awareness of security frameworks or standards (e.g., ISO 27001, NIST CSF, CIS Benchmarks for Azure/AWS) and interest in learning how they apply in practice.
• Knowledge of a variety of security tools, with depth in cloud-native security tooling.

🎁 Benefits

ClearView Healthcare Partners is an Equal Opportunity employer. All qualified applicants will be considered for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by applicable law.

🛂 Visa & Eligibility

ClearView Healthcare Partners is an Equal Opportunity employer. All qualified applicants will be considered for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by applicable law.