Senior Engineer / Tech Lead, Trust (Security, Privacy & Compliance) | GovTech

Atomic HR; Wisconsin; Teletrabalho; USD 140 000 - 180 000; Tempo integral

Resumo da oferta

Atomic HR is seeking a senior engineer to lead security, privacy, and compliance for the GovTech platform. You will partner with the Trust Product Manager and translate controls into production code, including automated access reviews and evidence collection.

This fully remote role operates in the U.S. and emphasizes secure environments, tenant isolation, and data protection, delivering standardized controls via shared modules to multiple teams.

Qualificações

• 7+ years of software engineering, with senior/lead experience on production systems.
• Experience designing identity and access systems and audit controls.
• Familiarity with threat modeling and risk-based enforcement of controls.
• Ability to translate policy requirements into automated systems.

Responsabilidades

• Lead security, privacy and compliance controls for the platform.
• Turn manual access reviews and evidence collection into code.
• Maintain environment isolation across tenants and data.
• Publish shared modules and reference implementations for teams.

Conhecimentos

Senior software engineer

Production systems

Cloud-native AWS

Infrastructure as code

CI/CD pipelines

Identity & access systems

Threat modeling

Auditing & compliance

Ferramentas

AWS

Node.js

TypeScript

Descrição da oferta de emprego

Company Overview:

Our client is a venture-backed govtech startup that helps families find the benefit programs they qualify for, apply to several at once and stay enrolled as rules change. State agencies, Medicaid managed care organizations and employers pay for the platform. It now runs eligibility checks and applications across federal, state and local programs. Its customers are highly regulated, so security and privacy shape how the team builds. The team is small and fully remote across the U.Security and privacy are now core parts of the platform, not side projects.

Role Overview

You’ll be the senior engineer and tech lead for the platform’s security, privacy and compliance controls, and the technical partner to the Trust Product Manager. Recurring manual work like access reviews and evidence collection moves into code. Keep environments, tenants, workloads and sensitive data separate from each other. Publish shared modules and reference implementations so other teams get the controls by default.

Qualifications & Responsibilities

• 7+ years of software engineering, including a few years as the senior or lead engineer on production systems. You’ve committed application and infrastructure code yourself in the last year or two.
• Cloud-native production experience, ideally on AWS, including infrastructure as code, CI/CD pipelines with approval steps, and environments you set up yourself.
• Identity and access systems you designed: authentication, role- or attribute-based authorization, service identities, secrets management, production access controls and audit logging.
• Threat modeling carried through to shipped controls, and audit, pen-test or incident findings you closed yourself.
• Good judgment on what to enforce in software and what to leave as a process, and the ability to explain that trade‑off to a product lead, an auditor and an engineer.
• A fully remote role within the U.Full-time employment through an Employer of Record (EOR)
• Mission‑driven impact: your work protects the data of families who rely on public benefits

Bonus Points:

• Automated evidence collection or continuous control monitoring that an auditor accepted
• Node, TypeScript and AWS in the same production environment
• Software built for government, healthcare or fintech customers