Security & Infrastructure Engineer

The role

You will own certification programs and the security and infrastructure across a multi-account AWS organization, GCP footprint, and internal engineering platform. This includes managing compliance, triaging security findings, and administering identity and access.

What you will do

• Own the compliance calendar across SOC 2 Type 2 and ISO 27001
• Triage security findings across cloud posture, code scanning, dependencies, and secrets
• Remediate findings directly in infrastructure as code, IAM policy, and pipeline configuration
• Administer identity and access across cloud and SaaS
• Support internal IT operations including endpoint fleet, device compliance, and SaaS administration
• Serve as the working interface to external auditors, certification bodies, and customer security reviews
• Build controls into infrastructure as automatic guardrails
• Harden CI/CD and the software supply chain
• Debug production issues across cloud infrastructure, containers, and networking
• Produce documentation including runbooks, control narratives, architecture notes, and postmortems

Required qualifications

• Professional experience in security engineering, infrastructure/platform engineering, or a closely related technical role
• Broad competence across security, networking, and operating systems
• Deep hands-on experience with security fundamentals
• Deep hands-on experience with networking including routing, firewalls, DNS, TLS termination, and proxies
• Deep hands-on experience with Linux operating systems
• Deep hands-on experience with cloud infrastructure including AWS or GCP
• Strong scripting/automation skills (Python, Bash, Go, or similar)
• Strong writing ability
• Proven judgment under ambiguity
• CS/CE degree or equivalent hands-on experience

Nice to have

• Hands-on ISO 27001 experience
• SOC 2 experience in practice
• Any exposure to AI governance or ISO 42001
• Infrastructure as code at scale (Pulumi primarily, Terraform secondarily)
• Multi-account cloud organization experience
• Identity provider and endpoint management at scale
• Cloud security tooling experience
• Container orchestration on ECS, EKS, or Kubernetes
• Observability
• Experience across both AWS and GCP

Benefits

• Comprehensive salary and equity package

About the company

Nexxa is building AI systems for heavy industries to enable machines and operations to act autonomously. Their mission is to translate technical breakthroughs into operational reality for manufacturing, infrastructure, and logistics.