Cloud Security & Compliance Architect for AI Infrastructure

Nexxa.AI; United States; Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Innovative environment

Collaborative culture

Professional growth

Competitive compensation

Job summary

Nexxa.ai is building leading AI systems for heavy industries. This role owns security and compliance across corporate and cloud environments, including SOC 2 Type 2, ISO 27001, and future certifications.

You will drive audit readiness, triage security findings, and automate controls in IAM, CI/CD, and the software supply chain. Remote-friendly, growth-focused, security-first at scale.

Qualifications

• Professional experience in security engineering, infrastructure/platform engineering, or a closely related technical role.
• Strong scripting/automation skills (Python, Bash, Go, or similar).
• Strong writing ability: control narratives, runbooks, postmortems, audit responses, risk assessments.
• Proven judgment under ambiguity and ability to rank findings.
• CS/CE degree or equivalent hands-on experience.

Responsibilities

• Own SOC 2 Type 2 and ISO 27001 compliance calendars and audit readiness.
• Triage security findings across cloud posture, code scanning, dependencies, and secrets; drive remediation.
• Remediate in infrastructure as code, IAM policy, and pipeline configuration.
• Administer identity and access across cloud and SaaS (SSO/federation, least-privilege roles).
• Support internal IT operations while keeping human costs flat as the company grows.
• Interface with external auditors and customers for security reviews.
• Build guardrails and automated controls in infrastructure.
• Harden CI/CD and software supply chain practices.
• Debug production issues across cloud infra, containers, and networking; write postmortems.
• Produce documentation: runbooks, control narratives, architecture notes, postmortems.

Skills

Security engineering

Infrastructure engineering

Scripting

Writing abilities

Judgment under ambiguity

CS/CE degree or equivalent

Education

CS/CE degree or equivalent hands-on experience

Tools

Pulumi

Terraform

AWS

GCP

SSO/SAML/OIDC

Job description

Nexxa.ai is building leading AI systems for heavy industries. This role owns security and compliance across corporate and cloud environments, including SOC 2 Type 2, ISO 27001, and future certifications.

You will drive audit readiness, triage security findings, and automate controls in IAM, CI/CD, and the software supply chain. Remote-friendly, growth-focused, security-first at scale.