Senior Security Architect - Privacy, Compliance & IAM

Atomic HR; Kentucky; Remote; USD 163,000 - 195,000; Full time

Benefits offered by this job

Fully remote within the U.S.

Employer of Record (EOR)

Job summary

Atomic HR is seeking a senior security-focused software engineer to lead platform security, privacy, and compliance controls. You will own architecture, production access, audit logging, and SOC 2 Type II/HIPAA alignment, while partnering with the Trust Product Manager on requirements and roadmap.

You will start by hardening the existing controls and automate evidence collection, then drive NIST 800-series alignment across the stack, including secure CI/CD and IaC practices.

Qualifications

• SOC 2 Type II and HIPAA experience: implemented controls and passed audits.
• Cloud-native production on AWS, IaC, CI/CD pipelines with approvals.
• Identity and access systems design: authentication, RBAC/ABAC, secrets management and audit logging.
• Threat modeling tied to shipped controls and audit/test readiness.
• Ability to explain trade-offs between enforcement and process to PMs, auditors and engineers.
• Based in the U.S. and able to work autonomously in a remote-first setup.

Responsibilities

• Identity & Production Access: design sign-in, role permissions, and secret storage.
• Isolation & Audit Logging: separate environments, tenants, workloads, and data; create auditable logs.
• SOC 2 Type II & HIPAA: maintain controls, automate evidence collection, close audit findings.
• Secure Delivery: CI/CD release path and infrastructure as code with pre-production approvals.
• Threat Modeling & Review: run threat models and convert findings into requirements; review sensitive code.
• Incident Readiness: logging, runbooks, escalation, and tabletop exercise participation.
• NIST 800-series Path: translate requirements into controls and a leadership roadmap.

Job description

Atomic HR is seeking a senior security-focused software engineer to lead platform security, privacy, and compliance controls. You will own architecture, production access, audit logging, and SOC 2 Type II/HIPAA alignment, while partnering with the Trust Product Manager on requirements and roadmap.

You will start by hardening the existing controls and automate evidence collection, then drive NIST 800-series alignment across the stack, including secure CI/CD and IaC practices.