A

Business Analyst / Healthcare

icon building Company : Align Executive Search
icon briefcase Job Type : Full Time
icon geo-alt United States

Job Description - Business Analyst / Healthcare

  • AWS administration depth. At least seven years administering production AWS environments, including time at a senior level where you owned outcomes rather than implemented someone else’s design. You can talk through specific decisions you made on networking, IAM, compute, and data services, what they cost, what they enabled, and what you would do differently now.
  • VPC, Transit Gateway, and cross organization networking. Deep production experience with VPC design, Transit Gateway topology, site to site VPN, customer gateway configuration, and the operational reality of routing traffic between AWS and external networks. You have built and maintained tunnels between AWS environments and on premises partner networks, and you can defend the topology to a network engineer on the other side of the table.
  • HIPAA in production AWS. You have administered AWS environments that handle PHI. You know what a BAA scope looks like in practice, where the encryption boundaries sit, and what an auditor will ask for when they walk through your configuration. You have shipped real production systems under HIPAA, not just read the compliance documents.
  • Aurora PostgreSQL and RDS administration. You have run Aurora PostgreSQL in production at a senior level. Scaling, parameter tuning, backup configuration, point in time recovery, read replica strategy, failover behavior. You have been on the other end of a real outage and can describe what you did.
  • Backup, restore, and recovery operations. Production experience running scheduled backups across databases and infrastructure state, executing real restore drills on a cadence, and recovering systems from a real incident rather than from a tabletop exercise. You can describe a restore you actually performed, what failed, and what you fixed afterward.
  • IAM and identity federation. Expert level command of IAM. Roles, policies, cross account access, identity providers, SSO federation, MFA enforcement, and access boundaries. You have implemented least privilege in a real organization, not just on a slide.
  • Microsoft Entra ID and workforce identity. Production experience administering Microsoft Entra ID inside a Microsoft 365 environment. Conditional Access policy design, MFA enforcement, SCIM provisioning into downstream SaaS, hybrid or cloud only identity topology, and the lifecycle of employee and contractor accounts from onboarding through offboarding. You have administered the Microsoft 365 services that sit on top of the directory, Exchange, SharePoint, Teams, and license management, and you have maintained the Entra ID groups and policies that govern who reaches what. You have actually run a directory, not just inherited one.
  • Route 53 and DNS. Production experience with Route 53, including zone design, routing policies, health checks, and the failover patterns that keep a service reachable when something underneath it falls over.
  • Networking fundamentals. You can explain TCP, BGP, IPsec, TLS, and DNS without a search engine open in another tab. You understand what is actually happening when a packet leaves one VPC and arrives in another, and you can troubleshoot when it does not arrive.
  • Linux administration. Real production Linux experience. You know your way around systemd, the network stack, log files, and the tools you actually reach for when something is broken.
  • Infrastructure as code. AWS CDK in TypeScript, Terraform, or comparable production experience. You write your changes in code, and you do not consider a change done until it is in version control.
  • Monitoring and observability. Production experience with CloudWatch, log aggregation, distributed tracing, and the alerting patterns that page the right person at the right time without crying wolf.
  • AI tool fluency. Daily use of AI for operations work, documentation, runbook writing, and incident analysis. Anthropic Claude in particular. We use AI throughout the engineering workflow, and you should be working with it rather than around it.
  • On call discipline. You have carried a real production pager. You know what good incident response looks like, and you can teach it.
  • Education. A four year college degree from an accredited institution, or demonstrated engineering depth that makes a degree unnecessary. Show the work.

    Preferred

  • EHR or healthcare infrastructure experience. Prior AWS administration on an EMR, EHR, or healthcare platform handling PHI. Bonus if you have worked with skilled nursing or assisted living operators.
  • HITRUST, SOC 2, or ONC. Time on an engineering team that took a product through a real audit. You know how compliance shapes infrastructure rather than treating it as paperwork bolted on at the end.
  • AWS Direct Connect. Production experience with Direct Connect, including the configuration patterns for partner connectivity that goes beyond what site to site VPN can carry.
  • Multi account AWS Organizations at scale. Production experience with Control Tower, account vending, SCP design, and the operational discipline of running a multi account environment correctly.
  • AWS certifications. AWS Solutions Architect Professional, Advanced Networking Specialty, or Security Specialty. The certification is not what we are buying. The depth that earned it is.
  • NordLayer or equivalent VPN platforms. Production experience configuring NordLayer, Tailscale, ZeroTier, or comparable cloud VPN platforms in a corporate or HIPAA context.
  • Multi region disaster recovery. You have designed and tested a real DR plan that goes beyond the database layer. You have failed over a production system to a different region and brought it back without losing data or trust.
  • GitHub Enterprise Managed Users. Hands on experience administering GitHub EMU with Entra ID OIDC and SCIM, including the operational quirks that come up when EMU and standard GitHub diverge.
  • Scripting depth. Python, Bash, or TypeScript for automation tasks beyond IaC. You can write the glue when there is no off the shelf tool for what needs to happen.
  • English proficiency. You communicate clearly in written and spoken English. Native fluency is not required. You can hold a video meeting, lead a runbook walkthrough, write a clear post mortem, and explain a networking decision to a partner’s IT team without translation friction slowing the conversation. The team works across time zones, and most communication is asynchronous and written.
Original job Business Analyst / Healthcare posted on GrabJobs ©. To flag any issues with this job please use the Report Job button on GrabJobs.
Share Job
Share Job
thunder icon

Get your Resume Reviewed for Free

Similar Business Analyst Jobs in the US

thunder icon

Get your Resume Reviewed for Free

GrabJobs us
facebook icon instagram icon linkedin icon

GrabJobs is the no1 job portal in the US, connecting you to thousands of jobs fast! Find the best jobs in the US, apply in 1 click and get a job today!

Mobile Apps

GrabJobs iOS App logo GrabJobs Android App logo GrabJobs Huawei App logo

Copyright © 2026 Grabjobs Pte.Ltd. All Rights Reserved.

Privacy Policy Terms of Use