Senior Engineer, Tech Lead – Trust, Security, Privacy & Compliance

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $14.6k - $17.5k / month

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Atomic - Remote Jobs

WebsiteLinkedInAll Job Openings

1 - 10 employees

📣 Marketing

📦 Logistics

✈️ Travel

Marketing • Logistics • Travel

Atomic - Remote Jobs is a recruitment platform that connects tech professionals in Latin America and Canada with remote career opportunities at startups and established companies worldwide. It operates a remote job board and offers personalized candidate support and matching, focusing on roles in engineering, design, marketing, and operations while emphasizing transparency, long-term career fit, and remote-first work arrangements.

📋 Description

• Design and implement identity, authentication, authorization, service identity, secrets management, production access, and audit controls • Define and implement isolation for environments, tenants, workloads, and sensitive data • Build audit logs and change history suitable for external auditor testing • Maintain technical SOC 2 Type II and HIPAA controls • Automate access reviews and audit evidence collection • Close technical audit findings and collaborate with auditors during testing • Build secure CI/CD release paths and infrastructure-as-code controls with production approvals • Publish shared modules and reference implementations so teams receive controls by default • Run threat models for critical workflows and convert findings into engineering requirements • Review security-sensitive code, infrastructure, and architecture changes • Own engineering-side logging, detection, runbooks, and escalation paths • Lead or support incident investigations and containment • Participate in tabletop exercises with the Trust Product Manager and leadership • Translate NIST requirements into controls and priorities • Provide leadership with a technical roadmap for state and federal environments, including FedRAMP-aligned practices where applicable • Serve as senior engineer and technical lead for security, privacy, and compliance controls • Partner technically with the Trust Product Manager, who owns requirements, governance, and roadmap

🎯 Requirements

• 7+ years of software engineering experience, including a few years as the senior or lead engineer on production systems • Committed application and infrastructure code personally within the last year or two • Hands-on SOC 2 Type II and HIPAA experience, including implementing and running controls through an audit • Experience building or operating a system holding protected health information • Cloud-native production experience, ideally on AWS • Experience with infrastructure as code and CI/CD pipelines with approval steps • Experience setting up production environments independently • Experience designing identity and access systems, including authentication, role- or attribute-based authorization, service identities, secrets management, production access controls, and audit logging • Threat modeling carried through to shipped controls • Experience closing audit, penetration-test, or incident findings • Ability to explain enforcement trade-offs to product leads, auditors, and engineers • Ability to work autonomously while architecture and the operating model are still taking shape • Must be based in the U.S. • Bonus: NIST 800-53 or other 800-series controls mapped to real system changes • Bonus: FedRAMP or ISO 27001 experience • Bonus: Automated evidence collection or continuous control monitoring accepted by an auditor • Bonus: Incident-response runbooks or tabletop exercise experience • Bonus: Node, TypeScript, and AWS in the same production environment • Bonus: Software built for government, healthcare, or fintech customers

🏖️ Benefits

• Fully remote role within the U.S. • Full-time employment through an Employer of Record (EOR) • Real technical ownership of design decisions and control-building priorities • Direct collaboration with Product & Engineering leadership • Mission-driven impact protecting the data of families who rely on public benefits