Security & Infrastructure Engineer — Cloud, IAM & SOC 2

Devopsroles; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Janus seeks a Security & Infrastructure Engineer to own external penetration testing and SOC 2 audit processes, building the controls needed to meet security standards and maintain compliance. You will manage identity and access across Microsoft 365, AWS, and third‑party applications, strengthen cloud security posture, and partner with DevOps to secure infrastructure.

The ideal candidate is a hands-on generalist across security, compliance, and cloud infrastructure, capable of writing

Qualifications

• 3-5 years of experience in information security, IT security, or a closely related field.
• Hands‑on experience administering Microsoft 365 identity and access management, including Entra ID (Azure AD), conditional access, and MFA.
• Experience configuring and managing SSO/SAML/OIDC integrations with third‑party SaaS applications.
• Working knowledge of security frameworks and controls (e.g., NIST, CIS Controls, SOC 2).
• Experience building or documenting repeatable security processes and procedures.
• Highly motivated self‑starter with a strong team orientation.
• Outstanding verbal and written communication skills.
• Must be located in the United States; sponsorship is not available at this time.

Responsibilities

• Manage Microsoft 365 identity and access, including user lifecycle, conditional access policies, MFA, and role-based permissions.
• Design and automate processes for provisioning and deprovisioning of user accounts and service accounts across cloud and SaaS environments
• Extend coverage to application-layer vulnerabilities, working in close coordination with development teams to surface and track findings
• Own and manage external security and penetration testing engagements end-to-end, including scoping, coordinating with vendors, tracking remediation, and validating fixes through retesting.
• Design, document, and implement security processes, policies, and controls required to achieve and maintain SOC 2 (and other applicable control frameworks) compliance on an ongoing basis.
• Continuously assess and improve our AWS security posture, including IAM, network security, and configuration hardening, and build ongoing security reporting and dashboards to track risk and compliance status.
• Partner with the DevOps team on infrastructure security and secure provisioning for cloud resources and CI/CD pipelines.
• Monitor for vulnerabilities and emerging threats across the environment, and maintain clear documentation of security policies, procedures, and audit evidence.

Skills

Information security

IT security

SSO/SAML/OIDC

NIST/CIS/SOC 2

Security processes

Communication

Startup adaptability

Tools

Microsoft 365

Azure AD

SSO/OIDC tooling

Datadog

Splunk

Job description

Janus seeks a Security & Infrastructure Engineer to own external penetration testing and SOC 2 audit processes, building the controls needed to meet security standards and maintain compliance. You will manage identity and access across Microsoft 365, AWS, and third‑party applications, strengthen cloud security posture, and partner with DevOps to secure infrastructure.

The ideal candidate is a hands-on generalist across security, compliance, and cloud infrastructure, capable of writing