AI GovTech Security & DevOps Engineer

Valid8 Financial, Inc.; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Valid8 Financial, Inc. is seeking a Security Engineer to secure and scale our AWS-based front desk services and CRM software for state and local governments.

You will own security and infrastructure end-to-end, from threat modeling and compliance to CI/CD, observability, and cloud hardening to meet public sector data standards. You will lead security initiatives across cloud infrastructure, application security, and identity, with opportunities to influence architecture and compliance posture

Qualifications

• 4+ years of combined experience in security engineering and DevOps / infrastructure / SRE roles.
• Hands-on production experience with AWS, Linux, containers (Docker/ECS/EKS), and infrastructure-as-code.
• Working knowledge of at least one major compliance framework (SOC 2, HIPAA, FedRAMP, StateRAMP, ISO 27001).
• Strong fundamentals in application security, cloud security, and identity (OAuth/OIDC, SAML, IAM).
• Comfortable writing code to automate security and ops workflows.

Responsibilities

• Own our cloud security posture across AWS (ECS Fargate, Aurora PostgreSQL, SQS, CloudFront, IAM, WAF, GuardDuty, Security Hub) and harden it against evolving threats.
• Drive our compliance programs end-to-end: SOC 2 Type II, HIPAA, StateRAMP / FedRAMP authorization, including evidence collection, policy authorship, and auditor management.
• Design and operate CI/CD pipelines, IaC (Terraform/CDK), and deployment workflows that make the secure path the easy path.
• Build and maintain infrastructure-as-code that codifies environments, enforces guardrails, and makes changes auditable and repeatable.
• Lead application security: threat modeling, secure code review, dependency and container scanning, secrets management, and remediation guidance.
• Build observability and incident response capabilities, including logging, alerting, runbooks, on-call rotations, and post-incident reviews.
• Manage identity and access at scale, including SSO/SAML, least-privilege IAM, and tenant isolation for multi-tenant architecture.
• Respond to customer security questionnaires, support sales on security and compliance asks from government procurement teams.

Skills

Security engineering

DevOps

AWS

Linux

Containers

IaC

OAuth/OIDC

SAML

IAM

Code automation

Tools

Terraform

CDK

Docker

ECS/EKS

CloudFront

GuardDuty

Job description

Valid8 Financial, Inc. is seeking a Security Engineer to secure and scale our AWS-based front desk services and CRM software for state and local governments.

You will own security and infrastructure end-to-end, from threat modeling and compliance to CI/CD, observability, and cloud hardening to meet public sector data standards. You will lead security initiatives across cloud infrastructure, application security, and identity, with opportunities to influence architecture and compliance posture