Senior Security & Infrastructure Engineer – AWS, Terraform & DevSecOps

Zazz; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

ZAZZ is seeking a Senior Security & Infrastructure Engineer to independently manage AWS infrastructure, security operations, access management, compliance, monitoring, DR, and DevSecOps responsibilities.

This remote role requires 7+ years in cloud security, Terraform/IaC, and SOC 2 experience, with the ability to work US business hours and collaborate across teams.

You’ll own deployments, audits, and DR testing while driving secure, scalable infrastructure for diverse clients.

Qualifications

• 7+ years of experience in Cloud Infra, Security, or DevSecOps.
• Strong hands-on AWS production experience.
• Expertise in Terraform / IaC.
• Experience with IAM, security groups, access management.
• Experience with SOC 2 audits, compliance, and evidence.
• Knowledge of DR testing and vulnerability management.
• Ability to work independently with limited supervision.

Responsibilities

• Own and manage AWS infrastructure, deployments, migrations, and production environments.
• Manage Terraform/IaC, IAM, permissions, security groups, and access controls.
• Lead onboarding/offboarding access reviews.
• Support DevSecOps, monitoring, troubleshooting, and deployments.
• Maintain segregation of duties and production access controls.
• Support SOC 2 audits, evidence collection, and policy reviews.
• Conduct vulnerability testing/remediation using AppCheck.
• Own Disaster Recovery testing and improvements.
• Manage and document AWS SageMaker environment.
• Support security posture monitoring using SecurityScorecard.
• Manage endpoint security through Scalefusion.
• Conduct security awareness and policy training.
• Maintain infrastructure, security, and asset documentation.
• Support client onboarding and secure AWS environment/data setup.

Skills

AWS

Terraform/IaC

Cloud security

SOC 2 knowledge

Security monitoring

Access management

Disaster Recovery

Vulnerability testing

Education

AWS or Terraform certifications

Tools

AppCheck

SecurityScorecard

Scalefusion

SageMaker

Job description

Senior Security & Infrastructure Engineer – AWS, Terraform & DevSecOps

Welcome to the Cutting-Edge of Innovation: ZAZZ

Step into the world of ZAZZ, a realm where innovative design meets software development brilliance. We're not your average tech company; we're trendsetters shaping the future, crafting digital masterpieces, and redefining boundaries.

At ZAZZ, technology isn't just a tool—it's our canvas, our playground. Our passionate, ingenious team doesn't just adapt to the latest technologies; we shape them. Join us, and you’ll be at the heart of a revolution, influencing, and driving technological advancements.

Empowering People. Transforming Experiences.

Ever dreamed of putting your mark on the digital universe? ZAZZ is the place. We breathe life into a bottom-up approach where our employees and users are the stars. Here, you won't just be creating software—you'll be part of a grand journey to revolutionize digital experiences.

Dive into the Tech Spectrum

With ZAZZ, you don't just get a job; you get an open ticket to a roller‑coaster of challenges and opportunities. From Product Strategy, IoT App Development to the bleeding‑edge Blockchain tech, we cover the entire spectrum of tech innovation. Prepare to ignite your creativity and fuel your passion in an environment buzzing with groundbreaking ideas and projects.

Shaping the Future, Together

It doesn't matter if our client is a fledgling startup, a dynamic SME, or a Fortune 500 titan—we’ve partnered with them all. At ZAZZ, you'll gain unparalleled exposure and experience in diverse sectors and technologies. You’ll not just grow; you'll evolve.

Why Join ZAZZ?

If you're seeking a place where your curiosity is celebrated, your skills valued, and your growth accelerated, look no further. ZAZZ offers a thriving work environment, opportunities for continuous learning, and the chance to work with some of the best minds in the industry. Plus, our team loves to get geeky over a coffee chat on the latest tech!

So, are you ready to leave a lasting footprint in the tech world? Join the ZAZZ family, and together, let's create the future.

Job Description

This is a remote position.

Position Overview

We are looking for a Senior Security & Infrastructure Engineer to independently manage AWS infrastructure, security operations, access management, compliance, monitoring, DR, and production support, while also handling DevSecOps responsibilities.

This is a hands‑on role requiring strong AWS, Terraform/IaC, cloud security, SOC 2, and production operations experience. The role will also support segregation of duties (SoD) between development, infrastructure, security, and production environments.

Hours: 30–40 hours/week | Work: Remote, US business hours

Key Responsibilities

Own and manage AWS infrastructure, deployments, migrations, and production environments.

Manage Terraform/IaC, AWS IAM, permissions, security groups, and access controls.

Manage employee onboarding/offboarding access and conduct periodic access reviews.

Support DevSecOps, production monitoring, troubleshooting, and deployments.

Maintain segregation of duties and appropriate production access controls.

Support SOC 2 audits, compliance activities, evidence collection, and security policy reviews.

Conduct vulnerability testing and remediation using tools such as AppCheck.

Own assigned Disaster Recovery testing , documentation, and improvements.

Manage and document the AWS SageMaker environment.

Support security posture monitoring using SecurityScorecard.

Manage endpoint security through Scalefusion.

Conduct security awareness and policy training.

Maintain infrastructure, security, and asset documentation.

Support client onboarding and secure AWS environment/data setup.

Required Qualifications

7+ years of experience in Cloud Infrastructure, Security Engineering, DevOps, or DevSecOps.

Strong hands‑on AWS experience in production environments.

Strong Terraform / Infrastructure as Code experience.

Experience with AWS IAM, security groups, access management, and cloud security.

Experience with production monitoring, troubleshooting, and deployments.

Experience with SOC 2, security audits, compliance, and audit evidence.

Experience with DR testing, vulnerability management, and security controls.

Strong understanding of DevSecOps and segregation‑of‑duties principles.

Ability to work independently and take ownership with limited supervision.

Preferred

Experience in banking, financial services, fintech, or regulated environments.

Experience with AppCheck, SecurityScorecard, and/or Scalefusion.

AWS or Terraform certifications.

Experience supporting SOC 2 Type II environments.

Location

Remote candidates may be considered from USA, Canada, Germany, Spain, Ireland, Israel, EU countries, and India, with the ability to work during US business hours.

Core Technologies: AWS | Terraform | IAM | SageMaker | DevSecOps | SOC 2 | AppCheck | SecurityScorecard | Scalefusion