[Hiring] Senior Security & Infrastructure Engineer @Zazz

Role Description

This is a remote position.

We are looking for a Senior Security & Infrastructure Engineer to independently manage AWS infrastructure, security operations, access management, compliance, monitoring, DR, and production support, while also handling DevSecOps responsibilities. This is a hands-on role requiring strong AWS, Terraform/IaC, cloud security, SOC 2, and production operations experience. The role will also support segregation of duties (SoD) between development, infrastructure, security, and production environments.

Hours: 30–40 hours/week | Work: Remote, US business hours

Key Responsibilities

• Own and manage AWS infrastructure, deployments, migrations, and production environments.
• Manage Terraform/IaC, AWS IAM, permissions, security groups, and access controls.
• Manage employee onboarding/offboarding access and conduct periodic access reviews.
• Support DevSecOps, production monitoring, troubleshooting, and deployments.
• Maintain segregation of duties and appropriate production access controls.
• Support SOC 2 audits, compliance activities, evidence collection, and security policy reviews.
• Conduct vulnerability testing and remediation using tools such as AppCheck.
• Own assigned Disaster Recovery testing, documentation, and improvements.
• Manage and document the AWS SageMaker environment.
• Support security posture monitoring using SecurityScorecard.
• Manage endpoint security through Scalefusion.
• Conduct security awareness and policy training.
• Maintain infrastructure, security, and asset documentation.
• Support client onboarding and secure AWS environment/data setup.

Qualifications

• 7+ years of experience in Cloud Infrastructure, Security Engineering, DevOps, or DevSecOps.
• Strong hands-on AWS experience in production environments.
• Strong Terraform / Infrastructure as Code experience.
• Experience with AWS IAM, security groups, access management, and cloud security.
• Experience with production monitoring, troubleshooting, and deployments.
• Experience with SOC 2, security audits, compliance, and audit evidence.
• Experience with DR testing, vulnerability management, and security controls.
• Strong understanding of DevSecOps and segregation-of-duties principles.
• Ability to work independently and take ownership with limited supervision.

Preferred

• Experience in banking, financial services, fintech, or regulated environments.
• AWS SageMaker experience.
• Experience with AppCheck, SecurityScorecard, and/or Scalefusion.
• AWS or Terraform certifications.
• Experience supporting SOC 2 Type II environments.

Location

Remote candidates may be considered from USA, Canada, Germany, Spain, Ireland, Israel, EU countries, and India, with the ability to work during US business hours.

Core Technologies

• AWS
• Terraform
• IAM
• SageMaker
• DevSecOps
• SOC 2
• AppCheck
• SecurityScorecard
• Scalefusion