Founding Cloud Security Engineer

Pasona Inc.; New York (NY); Remote; USD 160,000 - 190,000; Full time

Job summary

Pasona Inc. is seeking a Lead Cloud Security Engineer to design, implement, and strengthen security for a cloud-native fintech environment.

You will secure AWS infrastructure, drive security engineering, and integrate security into the development lifecycle, while collaborating with engineering and leadership teams across a fully remote US operation. The role emphasizes governance, risk, and compliance in a fintech context, with a focus on automation, secure coding practices, and threat modeling

Qualifications

• 5+ years in Cloud Security/DevSecOps/Platform Engineering
• Hands-on experience securing AWS environments
• Experience with Terraform or CloudFormation
• Strong knowledge of IAM, encryption, network security, logging and monitoring
• Proficient in Python or Go and security automation

Responsibilities

• Design, implement, and maintain secure AWS cloud environments.
• Develop and enforce cloud security best practices and guardrails.
• Manage identity and access controls, encryption, secrets management, logging, and monitoring.
• Secure CI/CD pipelines and software delivery processes.

Skills

Cloud Security

DevSecOps

IaC

Python/Go

IAM

Encryption

Network Security

Logging/Monitoring

CI/CD Security

Security Automation

Tools

Terraform

CloudFormation

AWS Security Services

Kubernetes

Job description

Funding Cloud Security Engineer (Fintech)

Location: Remote (United States)

Preferred Location: Midwest

Employment Type: Full-Time

Salary Range: $160,000 – $190,000

About the Opportunity

Global growing fintech company that is building next-generation digital financial infrastructure. As the organization continues to expand, we areseeking a Lead Cloud Security Engineer to help design, implement, and strengthen the security of their cloud-native environment.

This is an exciting opportunity to contribute to a highly regulated fintech platform supporting digital payments, treasury operations, and emerging financial technologies. The successful candidate will work closely with engineering and leadership teams to ensure the organization's cloud infrastructure remains secure, scalable, and compliant.

Key Responsibilities

Cloud Security & Architecture

• Design, implement, and maintain secure AWS cloud environments.
• Develop and enforce cloud security best practices, standards, and guardrails.
• Manage identity and access controls, encryption, secrets management, logging, and monitoring.
• Support network security design and threat detection initiatives.

Security Engineering & Automation

• Implement security controls using Infrastructure as Code (IaC) practices.
• Develop automated security checks and policy-as-code controls.
• Monitor cloud environments for vulnerabilities, misconfigurations, and security risks.
• Evaluate and deploy cloud-native and third-party security solutions.

DevSecOps & Application Security

• Secure CI/CD pipelines and software delivery processes.
• Implement code scanning, dependency management, and secrets protection.
• Participate in threat modeling and security architecture reviews.
• Partner with engineering teams to integrate security into the development lifecycle.

Governance, Risk & Compliance

• Support audit, compliance, and risk management initiatives.
• Maintain security documentation, standards, and operational procedures.
• Collaborate with internal and external stakeholders on security assessments and remediation activities.

Required Qualifications

• 5+ years of experience in Cloud Security Engineering, DevSecOps, Platform Engineering, or related fields.
• Hands-on experience securing AWS environments.
• Experience with Infrastructure as Code tools such as Terraform or CloudFormation.
• Strong understanding of:
  • AWS security services
  • Identity & Access Management (IAM)
  • Encryption and Key Management
  • Network Security
  • Logging and Monitoring
  • CI/CD Security
  • Security Automation
• Experience with scripting or programming languages such as Python or Go.
• Strong communication and problem-solving skills.
• Ability to work independently in a remote environment.

Preferred Qualifications

• Experience in fintech, banking, payments, financial services, or digital asset environments.
• Knowledge of regulatory and security frameworks such as NIST, SOC 2, CIS Benchmarks, or FFIEC.
• Experience with Kubernetes, containers, and cloud-native technologies.
• Familiarity with compliance automation and security monitoring platforms.
• AWS Security Specialty, CISSP, CCSP, or similar certifications.

Why Join?

• Opportunity to work on innovative fintech and digital payment platforms.
• High-impact role with significant ownership and visibility.
• Collaborate with experienced engineering and leadership teams.
• Fully remote position within the United States.
• Preference for candidates located in the Midwest region.
• Competitive compensation and career growth opportunities.