Corporate Security Automation Engineer (IaC)

ONE; États-Unis; À distance; USD 120 000 - 160 000; Plein temps

Avantages offerts par ce poste

Competitive health benefits

Flexible time off

Paid employee leave

401k plan with employer match

Monthly work-from-home stipend

Remote-first culture

Résumé du poste

OnePay is seeking a Corporate Security Engineer to lead the design, implementation, and optimization of our security infrastructure across enterprise systems. You will drive automation, configure IaC (Terraform), and collaborate with IT, Infra, and Security to ensure availability and compliance in a rapidly scaling environment.

You will deploy endpoint security aligned with industry standards and manage data protection controls (DLP) while maturing incident response and disaster recovery

Qualifications

• 5+ years IT experience, 3+ years in enterprise security in cloud.
• Strong scripting in Python, Go or TypeScript.
• Hands-on IaC and security automation experience.

Responsabilités

• Lead design, implementation and optimization of corporate security infrastructure.
• Enhance security controls and drive automation to scale security posture.
• Design and deploy endpoint security aligned with standards and vulnerability mgmt.
• Oversee data protection controls, including DLP and secure data handling.

Connaissances

Terraform

Automation

Scripting

Networking

ZTNA

DLP

MITRE ATT&CK

NIST CSF

Outils

Netskope

Zscaler

n8n

Puppet

Chef

Ansible

Description du poste

• As a Corporate Security Engineer at OnePay, you will lead the design, implementation, and optimization of our corporate security infrastructure
• You will enhance security controls, align goals with business objectives, and drive automation and self-service capabilities to maintain a strong security posture in a rapidly scaling environment
• Work with IaC tools like Terraform to ensure enterprise configurations are steady, change-managed and machine-readable
• Design and deploy endpoint security measures aligned with industry standards, including vulnerability management
• Ensure a strong security posture for corporate SaaS applications by configuring vendor capabilities or building automations to meet OnePay standards
• Mature and manage data protection controls, including Data Loss Prevention (DLP) tools and secure data handling processes
• Build secure methods for sharing data with internal teams and external partners
• Collaborate with IT, Infrastructure, and Security teams to implement security measures, maintain critical corporate systems (ensuring availability and compliance), and drive process improvement through automation
• Develop and run incident response and disaster recovery plans, including tabletop exercises

Benefits

• Competitive health benefits: Medical, dental, and vision plans, pluss wellness perks.
• Flexible time off: Rest, recharge, repeat.
• Paid employee leave: Sick, personal, caregiver, bereavement, ans parental.
• 401k plan: With employer match.
• Monthly work-from-home stipend: To cover those home office expenses.
• Remote-first culture: Work anywhere in the US.

Proven ability to lead projects, drive measurable security improvements through automation, leveraging scripting (Python, Go, and/or TypeScript)Skilled at simplifying technical concepts for non-technical audiences and influencing decisionsSolid understanding of networking, authentication standards, and security frameworks (MITRE ATT&CK, NIST CSF, CIS benchmarks), with hands-on experience in ZTNA and DLP solutions (e.g., Netskope, Zscaler)Experience with workflow automation tools like n8n is a plusExpertise in IaC tools like Terraform (preferred), Puppet, Chef or Ansible5+ years of IT experience, including 3+ years in enterprise security within cloud environments