Security & Cloud Infrastructure Engineer

janus; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Janus is seeking a Security & Infrastructure Engineer to own external penetration testing and SOC 2 processes, manage identity across Microsoft 365, AWS, and third-party apps, and partner with DevOps to secure infrastructure.

The ideal candidate is a hands-on generalist across security, compliance, and cloud infrastructure, capable of drafting audit-ready policies and building scalable processes from the ground up.

Qualifications

• 3–5 years in information security or IT security.
• Hands-on Microsoft 365 identity and access management experience.
• Experience configuring SSO/SAML/OIDC with SaaS apps.
• Knowledge of NIST, CIS Controls, SOC 2.
• Ability to document repeatable security processes.
• Strong communication and teamwork.
• Must be located in the United States; sponsorship not available.

Responsibilities

• Manage Microsoft 365 identity and access, including MFA and role-based permissions.
• Design and automate provisioning/deprovisioning across cloud and SaaS.
• Extend coverage to application-layer vulnerabilities with development teams.
• Own external security and penetration testing engagements end-to-end.
• Design and implement SOC 2 compliance controls.
• Improve AWS security posture, IAM, network security, and hardening.
• Partner with DevOps on secure provisioning for cloud resources and CI/CD.
• Monitor vulnerabilities and maintain security documentation and audit evidence.

Skills

Information security

Microsoft Entra ID

SSO/SAML/OIDC

Security frameworks

Security processes

Strong communicator

Startup adaptability

Tools

AWS security

Datadog

Splunk

Job description

Janus is seeking a Security & Infrastructure Engineer to own external penetration testing and SOC 2 processes, manage identity across Microsoft 365, AWS, and third-party apps, and partner with DevOps to secure infrastructure.

The ideal candidate is a hands-on generalist across security, compliance, and cloud infrastructure, capable of drafting audit-ready policies and building scalable processes from the ground up.