Senior Engineer / Tech Lead, Trust (Security, Privacy & Compliance) | GovTech

Atomic HR; Salem (NH); Teletrabalho; USD 180 000 - 240 000; Tempo integral

Resumo da oferta

Atomic HR, a venture-backed govtech startup, seeks a senior engineer to lead platform security, privacy and compliance controls from a remote US location.

You will partner with the Trust Product Manager, turning manual access reviews into coded controls, and ensure separation of environments, tenants and sensitive data while publishing reusable modules for other teams.

Qualificações

• 7+ years of software engineering, including a few years as the senior or lead engineer on production systems.
• Cloud-native production experience, ideally on AWS, including infrastructure as code, CI/CD pipelines with approval steps, and environments you set up yourself.
• Identity and access systems you designed: authentication, role- or attribute-based authorization, service identities, secrets management, production access controls and audit logging.
• Threat modeling carried through to shipped controls, and audit, pen-test or incident findings you closed yourself.
• Good judgment on what to enforce in software and what to leave as a process, and the ability to explain that trade‑off to a product lead, an auditor and an engineer.
• A fully remote role within the U.Full-time employment through an Employer of Record (EOR)
• Mission‑driven impact: your work protects the data of families who rely on public benefits

Responsabilidades

• Be the senior/lead engineer for platform security, privacy and compliance controls.
• Automate access reviews and evidence collection into code.
• Keep environments, tenants, workloads and sensitive data separated.
• Publish shared modules and reference implementations for other teams.
• Collaborate with Trust Product Manager on security strategy.
• Contribute to threat modeling and remediation across systems.

Conhecimentos

Senior engineer experience

Production systems

Security mindset

Ferramentas

AWS

Infrastructure as Code

CI/CD pipelines

Secrets management

Audit logging

Threat modeling

Descrição da oferta de emprego

Company Overview:

Our client is a venture-backed govtech startup that helps families find the benefit programs they qualify for, apply to several at once and stay enrolled as rules change. State agencies, Medicaid managed care organizations and employers pay for the platform. It now runs eligibility checks and applications across federal, state and local programs. Its customers are highly regulated, so security and privacy shape how the team builds. The team is small and fully remote across the U.Security and privacy are now core parts of the platform, not side projects.

Role Overview

You’ll be the senior engineer and tech lead for the platform’s security, privacy and compliance controls, and the technical partner to the Trust Product Manager. Recurring manual work like access reviews and evidence collection moves into code. Keep environments, tenants, workloads and sensitive data separate from each other. Publish shared modules and reference implementations so other teams get the controls by default.

Qualifications & Responsibilities

• 7+ years of software engineering, including a few years as the senior or lead engineer on production systems. You’ve committed application and infrastructure code yourself in the last year or two.
• Cloud-native production experience, ideally on AWS, including infrastructure as code, CI/CD pipelines with approval steps, and environments you set up yourself.
• Identity and access systems you designed: authentication, role- or attribute-based authorization, service identities, secrets management, production access controls and audit logging.
• Threat modeling carried through to shipped controls, and audit, pen-test or incident findings you closed yourself.
• Good judgment on what to enforce in software and what to leave as a process, and the ability to explain that trade‑off to a product lead, an auditor and an engineer.
• A fully remote role within the U.Full-time employment through an Employer of Record (EOR)
• Mission‑driven impact: your work protects the data of families who rely on public benefits

Bonus Points:

• Automated evidence collection or continuous control monitoring that an auditor accepted
• Node, TypeScript and AWS in the same production environment
• Software built for government, healthcare or fintech customers