Security & Infrastructure Engineer — IAM, AWS & SOC 2

Janus Health; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Janus is seeking a Security & Infrastructure Engineer to own external penetration testing and SOC 2 processes, and to manage identity across Microsoft 365, AWS, and third‑party apps. You will strengthen AWS security posture, partner with DevOps on secure infrastructure, and document repeatable security controls.

The ideal candidate is a hands-on generalist across security, compliance, and cloud infrastructure, capable of drafting audit-ready policies and building scalable processes from the

Qualifications

• 3–5 years in information security or IT security.
• Hands-on Microsoft 365 identity and access management (Entra ID, conditional access, MFA).
• Experience with SSO/SAML/OIDC integrations and security controls.
• Familiar with NIST, CIS Controls, and SOC 2 frameworks.
• Ability to document repeatable security processes and procedures.
• Excellent verbal and written communication; collaborative culture fit.
• Location in the United States; visa sponsorship not available.

Responsibilities

• Own external security testing engagements from scoping to remediation.
• Manage SOC 2 audit program and security controls ongoing.
• Oversee IAM across Microsoft 365, AWS, and third‑party apps.
• Strengthen AWS security posture: IAM, network, configuration hardening.
• Collaborate with DevOps to secure infrastructure and CI/CD.
• Develop audit-ready policy and maintain security documentation.
• Monitor vulnerabilities and provide risk dashboards.

Skills

Microsoft 365 IAM

Entra ID

Conditional access

MFA

SSO/SAML/OIDC

NIST/CIS/SOC2

Security processes

Communication

Startup agility

Job description

Janus is seeking a Security & Infrastructure Engineer to own external penetration testing and SOC 2 processes, and to manage identity across Microsoft 365, AWS, and third‑party apps. You will strengthen AWS security posture, partner with DevOps on secure infrastructure, and document repeatable security controls.

The ideal candidate is a hands-on generalist across security, compliance, and cloud infrastructure, capable of drafting audit-ready policies and building scalable processes from the