Infrastructure Security and Release Operations Lead

Bridgenext; Argentina; Remote; ARS 136,430,000 - 197,065,000; Full time

Job summary

Bridgenext is seeking an experienced Infrastructure Security and Release Operations Lead in LATAM to own day-to-day execution of release pipelines, security operations, and audit evidence collection. This remote contract role focuses on production deployment, SOC 2 readiness, and change control.

You will work with our client teams, manage Octopus Deploy and TeamCity workflows, coordinate with external auditors, and ensure secure access management.

Qualifications

• 8 years of total infrastructure or release engineering experience.
• 5 years directly owning production release and deployment pipelines.
• 5 years owning SOC 2 or equivalent change management and audit evidence processes.
• 5 years of hands on security operations experience.
• Identity and access management administration experience, including access reviews and privileged access controls.
• Experience supporting customer facing security questionnaires or RFP security sections.
• Experience working directly with external auditors through at least one full audit cycle.

Responsibilities

• Own production release and deployment pipelines (Octopus Deploy and TeamCity), including zero downtime deployment practices and fixing stuck or failed deploys.
• Approve production changes, hotfixes, and feature toggle changes, and schedule maintenance windows with appropriate customer notice through the status page.
• Own SOC 2 change management and audit evidence collection, and work directly with external auditors through full SOC 2, HIPAA, or PCI audit cycles.
• Run hands on security operations: vulnerability and patch remediation tracking, endpoint security tooling, and triage of externally reported vulnerabilities.
• Administer identity and access management: access reviews, MFA, privileged access controls, and granting or revoking production access to databases, VPN, and deployment tooling.
• Support customer facing security questionnaires and RFP security sections.
• Handle the roughly 25 monthly infrastructure and access tickets that require change approval or production access grants.

Skills

Infrastructure engineering

Release pipelines

SOC 2 / audit evidence

Security operations

Identity and access management

Security questionnaires / RFPs

Auditing with external auditors

AWS security

Vulnerability disclosure programs

GRC tooling

Customer trust platforms

Tools

Octopus Deploy

TeamCity

CloudTrail

Vanta

Drata

Job description

Company Overview

At Bridgenext, we engineer Growth Operating Systems. Most enterprises have spent millions on their revenue stack and still aren't seeing the growth they expected.They have tools that function, but no system that wins. We help growth-hungry companies close that gap by turning fragmented platforms, siloed teams, and disconnected data into one integrated Growth OS. More than a technology company or marketing agency, we're a global digital consultancy with experts in engineering, data, AI, creative and more.

Our teams are made up of experts who believe in engineering impact, starting with putting people at the center of everything we do. Every team member directly shapes our work, culture, and values. Nothing matters more to us than a kind, respectful, fulfilling environment that supports everyone. Our flexible, inclusive culture gives you the autonomy, resources, and opportunities to thrive.

Position Description

We are looking for a talented and experienced Infrastructure Security and Release Operations Lead in LATAM to assist our client team.This role is scoped as a senior execution level position covering production release management, change control, and security and compliance operations. The strategic and cross company leadership pieces, roadmap ownership, architecture review boards, mentoring, are not part of this role, those stay with existing leadership. This role is about owning the day to day execution: getting changes out safely, keeping SOC 2 evidence current, and running security operations.

Ideally this is scoped as a managed service package along with the Infrastructure and Platform Operations Manager and the Senior Database Engineer/DBA

Responsibilities:

• Own production release and deployment pipelines (Octopus Deploy and TeamCity), including zero downtime deployment practices and fixing stuck or failed deploys
• Approve production changes, hotfixes, and feature toggle changes, and schedule maintenance windows with appropriate customer notice through the status page
• Own SOC 2 change management and audit evidence collection, and work directly with external auditors through full SOC 2, HIPAA, or PCI audit cycles
• Run hands on security operations: vulnerability and patch remediation tracking, endpoint security tooling, and triage of externally reported vulnerabilities
• Administer identity and access management: access reviews, MFA, privileged access controls, and granting or revoking production access to databases, VPN, and deployment tooling
• Support customer facing security questionnaires and RFP security sections
• Handle the roughly 25 monthly infrastructure and access tickets that require change approval or production access grants

Workplace: Remote contract roles for candidates residing in LATAM, preferably Argentina

Must Have Skills:

• 8 years of total infrastructure or release engineering experience
• 5 years directly owning production release and deployment pipelines, including rollback practices
• 5 years owning SOC 2 or equivalent change management and audit evidence processes
• 5 years of hands on security operations experience
• Identity and access management administration experience, including access reviews and privileged access controls
• Experience supporting customer facing security questionnaires or RFP security sections
• Experience working directly with external auditors through at least one full audit cycle

Preferred Skills:

• AWS security experience: IAM, security groups, CloudTrail
• Familiarity with vulnerability disclosure programs (HackerOne, Bugcrowd) or coordinating third party penetration tests
• GRC or compliance tooling experience (Vanta, Drata, or similar)
• Experience with customer trust or security review platforms (Conveyor, CSA STAR)
• Prior experience at a SaaS company serving regulated industries

Professional Skills:

• Solid English written, verbal, and presentation communication skills
• Strong team and individual player
• Maintains composure during all types of situations and is collaborative by nature
• High standards of professionalism, consistently producing high quality results
• Self-sufficient, independent requiring very little supervision or intervention
• Demonstrate flexibility and openness to bring creative solutions to address issues

Culture Fit:

Comfortable being the person who says no to a change that isn't ready, even under pressure, and just as comfortable explaining exactly why so the requester isn't left guessing.

Bridgenext is an Equal Opportunity Employer

#LI-CP1

#LI-REMOTE