Senior Security & Infrastructure Engineer – AWS, Terraform & DevSecOps

This is a remote position.

We are looking for a Senior Security & Infrastructure Engineer to independently manage AWS infrastructure, security operations, access management, compliance, monitoring, DR, and production support, while also handling DevSecOps responsibilities.

This is a hands-on role requiring strong AWS, Terraform/IaC, cloud security, SOC 2, and production operations experience. The role will also support segregation of duties (SoD) between development, infrastructure, security, and production environments.

Hours: 30–40 hours/week | Work: Remote, US business hours

• Own and manage AWS infrastructure, deployments, migrations, and production environments.
  

• Manage Terraform/IaC, AWS IAM, permissions, security groups, and access controls.
  

• Manage employee onboarding/offboarding access and conduct periodic access reviews.
  

• Support DevSecOps, production monitoring, troubleshooting, and deployments.
  

• Maintain segregation of duties and appropriate production access controls.
  

• Support SOC 2 audits, compliance activities, evidence collection, and security policy reviews.
  

• Conduct vulnerability testing and remediation using tools such as AppCheck.
  

• Own assigned Disaster Recovery testing, documentation, and improvements.
  

• Manage and document the AWS SageMaker environment.
  

• Support security posture monitoring using SecurityScorecard.
  

• Manage endpoint security through Scalefusion.
  

• Conduct security awareness and policy training.
  

• Maintain infrastructure, security, and asset documentation.
  

• Support client onboarding and secure AWS environment/data setup.
  

• 7+ years of experience in Cloud Infrastructure, Security Engineering, DevOps, or DevSecOps.
  

• Strong hands-on AWS experience in production environments.
  

• Strong Terraform / Infrastructure as Code experience.
  

• Experience with AWS IAM, security groups, access management, and cloud security.
  

• Experience with production monitoring, troubleshooting, and deployments.
  

• Experience with SOC 2, security audits, compliance, and audit evidence.
  

• Experience with DR testing, vulnerability management, and security controls.
  

• Strong understanding of DevSecOps and segregation-of-duties principles.
  

• Ability to work independently and take ownership with limited supervision.
  

• Experience in banking, financial services, fintech, or regulated environments.
  

• AWS SageMaker experience.
  

• Experience with AppCheck, SecurityScorecard, and/or Scalefusion.
  

• AWS or Terraform certifications.
  

• Experience supporting SOC 2 Type II environments.
  

Remote candidates may be considered from USA, Canada, Germany, Spain, Ireland, Israel, EU countries, and India, with the ability to work during US business hours.

Core Technologies: AWS | Terraform | IAM | SageMaker | DevSecOps | SOC 2 | AppCheck | SecurityScorecard | Scalefusion