Staff Infrastructure & Security Engineer

Vouch; Chicago (IL); Hybrid; USD 170,000 - 230,000; Full time

Benefits offered by this job

Competitive compensation and equity

Health, dental, and vision insurance

Parental leave

Flexible vacation time

Wellness allowance

Technology allowance

Company-sponsored development

L&D partnerships

Wellbeing perks

Caregiver Support

Job summary

Vouch, a Chicago-based insurtech, is seeking a senior Infra & Security Engineering lead. You will own architecture, cloud platform reliability, and security operations, guiding DevOps and security teams through complex infrastructure challenges.

The role emphasizes implementing IAM controls, incident response, and compliance programs, with a focus on scalable, AI-forward infrastructure and isolating data while collaborating across Legal, Finance, IT, and Engineering.

Qualifications

• Expert level cloud engineering experience in AWS, designing and operating production infrastructure at scale.
• Strong in CI/CD (CircleCI, Nomad) and Terraform-based IaC with proven reliability ownership.
• Apply security pragmatically: isolation, least-privilege, RBAC, blast-radius containment.
• Formal background in information security or cybersecurity, with experience leading a SOC 2 audit.
• Has led at least one enterprise security breach or data-leak incident response.
• Hands-on technical lead capable of architecture, standards, code review, and setting direction.
• Bias toward simplicity and subtraction.
• AI-forward thinking: isolation, safe data, and non-human identity infrastructure.
• Communicate clearly across engineering, IT/Security, Legal, and Finance.

Responsibilities

• Serve as the technical DRI for Infra & Security: own architecture, set standards, and make technical calls across infra, DevOps, and security.
• Own the cloud platform end-to-end: reliability, CI/CD, delivery automation, and the infrastructure-as-code beneath them.
• Shrink surface area: retire legacy services, consolidate SaaS, and unwind external dependencies.
• Own infra & security incident-response: rotation, no single point of failure, actionable alerting, runbooks.
• Bring identity and access under a single source of truth: human, service, machine, and agent identity.
• Build Production-agent Infrastructure enabling autonomous agents to run and verify in production.
• Drive and maintain security-compliance and supply-chain scanning programs.

Skills

AWS Cloud Engineering

CI/CD Automation

Terraform (IaC)

Security Compliance

SOC 2 Audit

Technical Leadership

Cross-team Communication

Isolation Patterns

AI-forward Architecture

Education

Bachelor's degree in cybersecurity

Tools

CircleCI

Nomad

Temporal (workflow)

Snyk

Endor Labs

1Password

AWS SSM

Job description

About Vouch:

Vouch is the insurance broker that powers ambition.

We're a tech-enabled insurance advisory and brokerage purpose-built for growing companies in technology, life sciences, and professional services. Our clients are ambitious leaders building complex businesses, and we help them manage risk with tailored advice, smart coverage, and responsive service.

Backed by over $200M from world-class investors, Vouch combines deep industry expertise with AI-powered tools to deliver a better insurance experience. Our digital workflows reduce friction, speed up decisions, and give our clients the confidence to move faster.

Why should you join our team and Vouch?

Not only is this an exciting and growing team where you can drive a real impact on our operational scalability, but Vouch is also the preferred insurance provider to customers of Y Combinator, Brex, Carta, and WeWork. We're a quickly growing startup that believes in transparency and acknowledgment with our team members and cultivating a values-driven company. Our values are "Be Client Obsessed", "Own it together", "Act with integrity and empathy", "Stay Curious and Grow", and "Empower People."

What does a work environment look like at Vouch?

Vouch has employees located across the U.S., with offices in San Francisco, Chicago, and New York City. This role is aligned to our Chicago Office. While this role has hybrid work flexibility, we require team members to be in the office at least three days per week (Tuesday, Wednesday and Thursday) to foster close collaboration and team building.

What You'll Do:

• Serve as the technical DRI for the Infra & Security group: own the architecture, set the standards, and make the technical calls across infrastructure, DevOps, and security engineering.
• Own the cloud platform end-to-end: infrastructure reliability, CI/CD and delivery automation, and the infrastructure-as-code beneath them.
• Drive a simpler, isolated architecture through shrinking the surface area we defend and maintain: Retire legacy and unused services, consolidate SaaS and vendors, and unwind standing external dependencies.
• Own infra & security incident-response: a staffed rotation with no single point of failure, severity-matched response, actionable alerting, and runbooks.
• Bring identity and access under a single source of truth: human, service, machine, and agent identity.
• Build the Production-agent Infrastructure that lets autonomous agents run and self-verify safely in production.
• Drive and maintain our security-compliance and supply-chain scanning programs.

About You:

• Deep cloud engineering experience, primarily in AWS: designing, building, and operating production infrastructure at scale.
• Strong in CI/CD and delivery automation (CircleCI, Nomad, or equivalent) and infrastructure-as-code (Terraform), with ownership of a real production system's reliability.
• Apply security pragmatically: isolation, least-privilege, RBAC, blast-radius containment.
• A formal background in information security or cybersecurity, including having led a SOC 2 (or similar) compliance audit.
• Has led at least one enterprise security-breach or data-leak incident response.
• Comfortable as a hands-on technical lead and DRI: work through architecture, standards, and code review, set technical direction, and raise the bar across a team.
• A bias toward simplicity and subtraction.
• AI-forward: build for isolation, safe data, and non-human identity, and the infrastructure behind it.
• Communicate crisply across engineering, IT/Security, Legal, and Finance.

Nice To Have:

• Experience operating Temporal or similar durable-workflow infrastructure in production.
• Hands-on with supply-chain / dependency vulnerability scanning (Endor Labs, Snyk, or equivalent).
• Compliance-as-code experience: treating controls and evidence as an engineering artifact.
• Familiarity with agent / sandbox isolation patterns: dedicated accounts, scoped tokens, ephemera environments, and data masking.
• Secrets and credential management at scale (1Password, AWS SSM, or equivalent).
• Experience in insurance, fintech, or another regulated domain.
• A university degree in cybersecurity or a related field.

Vouch provides several benefits to help you bring your best self to work:

• Competitive compensation and equity packages
• Health, dental, and vision insurance
• Parental leave
• Flexible vacation time
• Wellness allowance
• Technology allowance
• Company-sponsored personal and professional development
• L&D: Partnerships with Ethena and monthly Lunch & Learns
• Wellbeing: access to many wellbeing perks, including Peloton, Fetch, OneMedical, Headspace care , etc.
• Caregiver Support: company seed into the dependent care FSA and company sponsored Care.com membership.
• Regular performance reviews: Vouch conducts regular performance discussions with all team members, offering goal setting and check-ins, development discussions, and promotion opportunities.

What to expect in a typical interview process:

(Please note these steps may vary slightly depending on the role)

• 30-minute phone call with our recruiting team
• 30-45 minute video interview with the hiring manager
• Case study/technical screen
• Meet the team! 30-45 min 1:1 video discussion with 3-4 team members you'd work closely with in the role
• Executive chat

Compensation philosophy:

Our salary ranges are based on paying competitively for our size and industry and are part of our total compensation package, which also includes benefits and other perks. We also include stock options in all compensation packages and believe all Vouch employees should have the opportunity to become owners in the company. Individual pay decisions are based on a number of factors, including qualifications for the role, experience level, skill set, location, and business need. The pay range provided is subject to change and may be modified in the future.

Vouch believes in putting our people first, and building a diverse team is at the front of everything we do. We welcome people from different backgrounds, experiences, perspectives, and ranges of abilities. We are an equal-opportunity employer and celebrate the diversity of our growing team.