Remote Systems & Security Engineer (AWS, SOC 2)

AVATAR FLEET LLC; Central City (NE); Remote; USD 120,000 - 160,000; Full time

Job summary

AvatarFleet seeks a Systems & Security Engineer to own security administration, vulnerability management, and AWS-based infrastructure. You will work with the CTO and software engineers to ensure SOC 2 Type II readiness and reliable production services.

Fully remote in the United States, the role emphasizes Linux administration, CI/CD support, and automation using Terraform, Ansible, and AWS CLI to keep our SaaS platform secure and auditable.

Qualifications

• At least 5 years of hands-on Linux systems administration with production exposure.
• Strong AWS administration skills including EC2, ECS, IAM, networking, load balancing, WAF, and monitoring.
• Experience supporting SOC 2 Type II audits with evidence collection and remediation tracking.
• Hands-on vulnerability management, Linux patching, and security hardening.
• Experience with Terraform, Ansible, AWS CLI, shell scripting, Docker, and Docker Compose.
• Experience supporting CI/CD pipelines and deployment troubleshooting with engineers.
• Ability to troubleshoot across Linux, AWS, networking, containers, databases, storage, and runtimes.
• Excellent written communication and documentation discipline.

Responsibilities

• Own day-to-day security administration and coordinate SOC 2 Type II control execution, evidence collection, and annual audit preparation with the CTO and other control owners.
• Maintain a year-round control calendar; track recurring reviews, evidence requirements, remediation commitments, and audit requests through completion.
• Maintain security policies and operating procedures that reflect actual practices; identify control gaps early and drive corrective action.
• Administer access controls and support access reviews, least privilege, credential management, and security logging. Keep records complete and readily available for audit.
• Run and review vulnerability assessments; prioritize findings by severity, exposure, business risk, and customer impact.
• Own routine and urgent patching of Linux hosts, application dependencies, container images, and supporting software in partnership with engineering.
• Plan maintenance, validate changes, and confirm remediation. Apply and document mitigations when an immediate patch is not practical.
• Track findings from discovery through verified resolution and maintain evidence of patching, mitigation, and approved exceptions.
• Deploy, configure, and maintain AWS resources, including EC2, ECS, WAF, ALB, S3, EFS, IAM, and networking components.
• Maintain secure configurations, appropriate capacity, reliable connectivity, and effective monitoring across production and supporting environments.
• Manage backups, replication, retention, restore testing, and secure data disposal in line with operational and compliance requirements.
• Improve performance and cost efficiency while protecting application availability.
• Administer Debian and Amazon Linux hosts, including services, packages, permissions, storage, networking, and system configuration.
• Maintain production applications on EC2 hosts and troubleshoot issues across the operating system, application runtime, containers, network, and storage.
• Support Docker, Docker Compose, and ECS workloads; keep configurations consistent and operating procedures documented.
• Maintain actionable infrastructure and security monitoring, log collection, and alerting; investigate alerts and respond to service interruptions.
• Restore service promptly, communicate impact and progress, and coordinate with engineering during production incidents.
• Investigate root causes, document incidents, and implement improvements that reduce recurrence.
• Maintain recovery procedures and operational runbooks; validate that backups and recovery processes work when needed.
• Support software engineering with CI/CD configuration, deployment environments, build and release troubleshooting, and secure pipeline access.
• Help maintain dependable deployments, configuration and secrets management, rollback procedures, and environment consistency.
• Partner with engineers to diagnose infrastructure and runtime issues affecting development, testing, and production.
• Use Terraform, Ansible, AWS CLI, and scripting to automate provisioning, configuration, patching, and recurring operational tasks.
• Keep infrastructure changes reviewable and reproducible; maintain useful system documentation, runbooks, and audit evidence.

Skills

Linux administration

AWS administration

SOC 2 Type II

Vulnerability management

CI/CD support

Automation scripting

Documentation & runbooks

Communication & collaboration

Tools

AWS

Docker

Terraform

Ansible

Docker Compose

Job description

AvatarFleet seeks a Systems & Security Engineer to own security administration, vulnerability management, and AWS-based infrastructure. You will work with the CTO and software engineers to ensure SOC 2 Type II readiness and reliable production services.

Fully remote in the United States, the role emphasizes Linux administration, CI/CD support, and automation using Terraform, Ansible, and AWS CLI to keep our SaaS platform secure and auditable.