Senior Platform Security Engineer — SOC 2 & HIPAA (Remote)

Atomic HR; Manchester (NH); Remote; USD 163,000 - 195,000; Full time

Benefits offered by this job

Fully remote (US)

Technical ownership

Employer of Record (EOR)

Impact on public-benefits data

Job summary

Atomic HR is seeking a Senior Security Engineer and Tech Lead to own and advance the platform's security, privacy, and compliance controls. You will drive architecture, threat modeling, and secure delivery across production systems in a fully remote US role.

You'll start with SOC 2 Type II and HIPAA controls, then steer NIST 800-series alignment, incident readiness, and ongoing audit collaboration with leadership and a PM. This is a high-responsibility, autonomous role.

Qualifications

• 7+ years of software engineering, incl. senior/lead on production systems.
• Hands-on SOC 2 Type II and HIPAA experience with audits.
• Cloud-native production experience, AWS + IaC.
• Identity and access systems design: authentication, RBAC/ABAC, secrets management.
• Threat modeling carried through to shipped controls, audit findings closure.
• Ability to justify software vs process trade-offs to PMs and auditors.

Responsibilities

• Design and implement identity & production access controls.
• Define production access provisioning and approvals.
• Develop code and align with Trust PM requirements.
• Maintain isolation of environments, tenants, workloads, data.
• Build auditable logs and change history for auditors.
• Maintain SOC 2 Type II & HIPAA controls and automate evidence collection.
• Secure delivery with CI/CD and infrastructure as code, with approvals.
• Publish shared modules and reference implementations.

Skills

SOC 2 Type II

HIPAA compliance

AWS

CI/CD pipelines

Access control design

Threat modeling

Incident response

Security architecture

Autonomous work

Tools

Terraform

IaC

Auditing tools

CI/CD tooling

Job description

Atomic HR is seeking a Senior Security Engineer and Tech Lead to own and advance the platform's security, privacy, and compliance controls. You will drive architecture, threat modeling, and secure delivery across production systems in a fully remote US role.

You'll start with SOC 2 Type II and HIPAA controls, then steer NIST 800-series alignment, incident readiness, and ongoing audit collaboration with leadership and a PM. This is a high-responsibility, autonomous role.