Senior Cloud & Security Engineer - AWS, DevOps & SRE

Newity LLC; Chicago (IL); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401(k) with company match

Paid Time Off

Job summary

NEWITY LLC in Chicago seeks a Cloud and Infrastructure Engineer to design, operate, and secure a multi-account AWS environment with serverless and Azure components.

You will own security posture, IaC, CI/CD pipelines, and collaborate with Product Engineering while maintaining independence from feature delivery.

This hybrid role rewards hands-on resilience and a proactive approach to observability, incident response, and cost optimization in a regulated fintech setting.

Qualifications

• Bachelor's degree or equivalent professional experience.
• 4 - 7 years of experience in Cloud Infrastructure, DevOps, Platform Engineering, or Site Reliability Engineering (SRE).
• Experience designing, deploying, and supporting AWS cloud environments in production.
• Strong expertise across AWS — compute and serverless, storage, managed databases, networking, edge/CDN and DNS, API management, and event-driven messaging.
• Experience with Infrastructure as Code tools such as Terraform or AWS CloudFormation
• Proven experience building and maintaining CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, GitLab CI, or similar platforms
• Strong cloud security fundamentals: least-privilege access design, secrets management, and network and public-exposure hardening
• Proficiency implementing and maintaining secure cloud environments, preferably within regulated industries
• Experience with monitoring, logging, alerting, and threat-detection tooling
• Site reliability fundamentals: service health and availability monitoring, capacity and performance management, and systematically reducing operational toil through automation
• Scripting and automation ability in at least one general-purpose language
• Solid understanding of networking, security, identity management, and cloud architecture best practices
• Experience operating within a change-controlled, audited environment (SOC 2 or comparable)
• Comfortable partnering daily with a separate product engineering organization while remaining independent of it, including raising and holding security or reliability objections
• Excellent problem-solving, communication, and cross-functional collaboration skills
• Experience with containerization and orchestration technologies a plus
• Azure experience (secrets/key management, RBAC, security posture tooling) a plus
• Exposure to Jack Henry or IBM i / AS400 environments a plus — we run on a hosted platform with limited back-end access, but have had real success interfacing directly with the i Series to work around platform limitations
• AWS certification (e.g., Solutions Architect Associate, SysOps Administrator Associate, or Security Specialty) a plus

Responsibilities

• Support implementation and ongoing management of scalable, secure, and highly available AWS cloud infrastructure supporting business-critical applications and services.
• Own the implementation and ongoing management of secure, scalable, and highly available AWS cloud infrastructure supporting business-critical applications and services
• Own the security posture of that infrastructure — identify, prioritize, and remediate infrastructure security findings, and maintain the access, network, and data-protection controls that keep the environment defensible
• Administer and harden identity and access within AWS: least-privilege policy design, role and permission-set hygiene, and credential lifecycle management
• Own secrets management posture — secure storage, rotation, and safe runtime access patterns for application workloads
• Design, implement, and maintain Infrastructure as Code solutions using tools such as Terraform or AWS CloudFormation
• Build and optimize CI/CD pipelines to enable automated, reliable, and secure software deployments
• Contribute to cloud architecture, infrastructure standards, and operational best practices supporting performance, reliability, security, and cost efficiency
• Manage containerized and cloud-native environments
• Own and expand remote-access infrastructure (AWS Client VPN)
• Administer a small set of supporting Azure services, including secrets/key management and role assignments
• Maintain monitoring, logging, alerting, and observability solutions (CloudWatch, GuardDuty, and similar) to identify and resolve issues
• Own service reliability and availability — define and track service health objectives, manage capacity and performance, and drive down operational toil through automation
• Participate in incident response, root cause analysis, and recovery planning efforts
• Support the infrastructure underpinning NEWITY's external partner integrations — banking, credit, identity verification, tax, and lending-marketplace data providers — including credential storage, network paths, and exposure controls
• Partner with Product Engineering to support application performance, scalability, and regulatory requirements, while remaining organizationally independent of that team
• Support NEWITY's SOC 2 Type II compliance program through infrastructure evidence and control maintenance, and help extend that work as additional compliance frameworks come into scope over time
• Drive cloud cost optimization initiatives and recommend improvements
• Promote DevOps best practices, automation, and a culture of continuous improvement
• Research and recommend emerging technologies to support infrastructure strategy

Skills

Cloud Infrastructure

DevOps Practices

CI/CD Automation

Security Fundamentals

Networking & Security

Scripting

SOC 2 Experience

Cross-functional Collaboration

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, or related field

Tools

Terraform

AWS CloudFormation

GitHub Actions

Azure DevOps

Jenkins

GitLab CI

Job description

NEWITY LLC in Chicago seeks a Cloud and Infrastructure Engineer to design, operate, and secure a multi-account AWS environment with serverless and Azure components.

You will own security posture, IaC, CI/CD pipelines, and collaborate with Product Engineering while maintaining independence from feature delivery.

This hybrid role rewards hands-on resilience and a proactive approach to observability, incident response, and cost optimization in a regulated fintech setting.