Senior Engineer / Tech Lead, Trust (Security, Privacy & Compliance) | GovTech

Atomic HR; Town of King (WI); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Remote role

Employer of Record (EOR)

Job summary

Our client is a venture-backed govtech startup focused on helping families access benefit programs securely and at scale. You will serve as the senior engineer and tech lead for security, privacy, and compliance across the platform, partnering with the Trust Product Manager to embed controls into product delivery.

You will design and implement automated, auditable controls, ensure separation of environments and data, and publish reusable reference implementations for other teams.

Qualifications

• 7+ years of software engineering, including senior/lead on production systems.
• Cloud-native production experience on AWS with infrastructure as code and CI/CD pipelines with approval steps.
• Identity and access systems designed: authentication, authorization, service identities, secrets management, production access controls and audit logging.
• Threat modeling carried through to shipped controls, and audit, pen-test or incident findings you closed yourself.
• Good judgment on what to enforce in software and what to leave as a process, and the ability to explain that trade-off to a product lead, an auditor and an engineer.

Responsibilities

• You' ll be the senior engineer and tech lead for the platform’s security, privacy and compliance controls, and the technical partner to the Trust Product Manager.
• Keep environments, tenants, workloads and sensitive data separate from each other.
• Publish shared modules and reference implementations so other teams get the controls by default.

Skills

AWS

CI/CD

IaC

Auth systems

Audit logging

Threat modeling

Security trade-offs

Remote collaboration

Tools

AWS

Job description

Company Overview: Our client is a venture-backed govtech startup that helps families find the benefit programs they qualify for, apply to several at once and stay enrolled as rules change. State agencies, Medicaid managed care organizations and employers pay for the platform. It now runs eligibility checks and applications across federal, state and local programs. Its customers are highly regulated, so security and privacy shape how the team builds. The team is small and fully remote across the U.Security and privacy are now core parts of the platform, not side projects.

You’ll be the senior engineer and tech lead for the platform’s security, privacy and compliance controls, and the technical partner to the Trust Product Manager. Recurring manual work like access reviews and evidence collection moves into code.

Keep environments, tenants, workloads and sensitive data separate from each other.

Publish shared modules and reference implementations so other teams get the controls by default.

7+ years of software engineering, including a few years as the senior or lead engineer on production systems. You've committed application and infrastructure code yourself in the last year or two.

• ~ Cloud-native production experience, ideally on AWS, including infrastructure as code, CI/CD pipelines with approval steps, and environments you set up yourself.
• ~ Identity and access systems you designed: authentication, role- or attribute-based authorization, service identities, secrets management, production access controls and audit logging.
• ~ Threat modeling carried through to shipped controls, and audit, pen-test or incident findings you closed yourself.
• ~ Good judgment on what to enforce in software and what to leave as a process, and the ability to explain that trade-off to a product lead, an auditor and an engineer.

Bonus points:

• Automated evidence collection or continuous control monitoring that an auditor accepted
• Node, TypeScript and AWS in the same production environment
• Software built for government, healthcare or fintech customers
• A fully remote role within the U.Full-time employment through an Employer of Record (EOR)

Mission-driven impact: your work protects the data of families who rely on public benefits