Remote Senior Security & Infrastructure Engineer

Description:

• Own the security and compliance posture of AWS infrastructure, focusing on authorization boundary, continuous monitoring, and automation.
• Drive FedRAMP execution, including control implementation and 3PAO coordination.
• Harden and modernize production infrastructure with IaC, network segmentation, and incident response.
• Integrate compliance into CI/CD and developer workflows.
• Collaborate with engineering teams to ensure security decisions are defaults.

Requirements:

• Experience with FedRAMP authorization (Agency or JAB, Moderate or above).
• Deep AWS experience and strong infrastructure-as-code fundamentals.
• Ability to manage both engineering tasks and documentation (e.g., writing control narratives and fixing Terraform).
• Familiarity with SOC 2, StateRAMP, continuous monitoring tools, and threat modeling.
• Bonus: Experience with Node/TypeScript, PostGIS, and GovTech/public sector delivery.

Benefits:

• Mission-driven work with a focus on real-world problems and community impact.
• Opportunity to be a key part of a small, growing team with meaningful influence.
• Supportive environment with feedback and learning opportunities.
• Flexible work arrangements (hybrid or remote) with offices in NYC, San Francisco, and Portland, ME.
• Competitive compensation, health/vision/dental coverage, 401k plan, and wellness reimbursement.