Senior Platform Security Engineer – SOC 2 & HIPAA (Remote)

Atomic HR; Lexington (KY); À distance; USD 163 000 - 195 000; Plein temps

Résumé du poste

Atomic HR is seeking a senior security-focused engineer to lead architecture and controls for our Govtech platform. You will own SOC 2 Type II and HIPAA controls, automate evidence collection, and drive NIST 800‑series alignment with the PM and leadership.

You will design production access, audit logs, and incident readiness, while collaborating with Trust Product Manager to translate requirements into secure, scalable solutions across AWS environments in a fully remote US team.

Qualifications

• 7+ years in software engineering with production systems.
• Hands-on SOC 2 Type II and HIPAA controls audited.
• Experience with AWS and IaC.
• Designing identity and access systems with audit logging.

Responsabilités

• Design how identities sign in and access controls.
• Define production access and approvals.
• Implement controls in code and CI/CD.
• Maintain separate environments and audit logs.
• Lead threat modeling and remediation outcomes.
• Ensure SOC 2 Type II and HIPAA controls remain compliant.
• Build release paths with IaC and approvals.
• Provide governance for NIST 800-series alignment.

Connaissances

Senior engineer

SOC 2 Type II

HIPAA compliance

Cloud AWS

CI/CD experience

Security auditing

Autonomous work

Formation

Bachelor's degree in CS or related field

Outils

AWS

Terraform

CI/CD pipelines

IAM / Secrets management

Description du poste

Atomic HR is seeking a senior security-focused engineer to lead architecture and controls for our Govtech platform. You will own SOC 2 Type II and HIPAA controls, automate evidence collection, and drive NIST 800‑series alignment with the PM and leadership.

You will design production access, audit logs, and incident readiness, while collaborating with Trust Product Manager to translate requirements into secure, scalable solutions across AWS environments in a fully remote US team.