• Manage large security projects, proactively enhance system defenses, and ensure compliance with regulations like HIPAA and the HITRUST r2 CSF • Develop robust and secure code for security tooling, automation, and critical integrations to improve our security posture • Partner with cross-departmental leaders in Suki to reduce the friction, increase speed-to-market and deliver secure-by-design products • Conduct security assessments and red-teaming on proprietary and third-party AI/ML models, LLMs, and data pipelines (testing for prompt injection, data poisoning, training data extraction, and model inversion) • Implement guardrails to prevent PHI exposure in model training, vector databases, RAG architectures, and fine-tuning datasets • Own the technical security architecture across our multi-cloud footprint (AWS / GCP / Azure), ensuring zero-trust principles and robust Cloud Security Posture Management (CSPM) • Secure Kubernetes clusters, container registries, and Infrastructure-as-Code (Terraform / CloudFormation) within CI/CD deployment pipelines • Design and enforce least-privilege IAM policies, role-based access controls (RBAC), just-in-time (JIT) provisioning, and secrets management across cloud environments • Design and enforce microsegmentation, VPC architecture, SASE/VPN solutions, and strict network isolation for multi-tenant health data architectures • Manage network security controls, intrusion detection/prevention systems (IDS/IPS), and Web Application Firewalls (WAF) to prevent unauthorized data exfiltration • Proven track record in cloud network design, VPC routing, cloud firewalls, Zero Trust Network Access (ZTNA), and egress control

• Administration of M365 Services: Copilot/Agents, Copilot Studio, Power Platform, Power BI, Docusign and Kiteworks • Solid working knowledge of Azure Services and Integrations • Assess the existing environment to identify improvements • Evaluate new technologies and trends to make recommendations on how they can be implemented to impact the company positively • Design solutions and lead staff in the implementation of the designs through mentorship and guidance • Provide a bridge between technical staff and business leadership • Increase efficiency within the IT department through streamlining and automating processes • Provide technical direction on system implementation • Drive plans for the integration of new infrastructure systems • Drive virtual infrastructure design and implementation • Collaborate with the IT Operations Architect to implement platform standards, reference architectures, and operational best practices • Ensure infrastructure designs incorporate a security-first approach

• ensure compliance with NIST 800-53 Rev. 5 • FedRAMP • DoD IL 2, 4, and 5 security controls • implement security controls and frameworks within cloud environments • ensure compliance with security policies • proficient in identity and access management (IAM) • security monitoring • cloud-native security solutions

• The Cloud Web Developers will specialize in secure, scalable web application development, ensuring compliance with FedRAMP & DoD IL requirements. • Possess the knowledge and capability to design, develop, and maintain secure cloud-based web applications, ensuring compliance with FedRAMP and DoD IL security requirements. • Personnel must be proficient in modern web frameworks, API development, and cloud-native architecture, with expertise in Microsoft Azure and AWS environments.