Senior Security & Infrastructure Engineer

Description: Own the security and compliance posture of AWS infrastructure, focusing on authorization boundary, continuous monitoring, and automation. Drive FedRAMP execution, including control implementation and 3PAO coordination. Harden and modernize production infrastructure with IaC, network segmentation, and incident response. Integrate compliance into CI/CD and developer workflows. Collaborate with engineering teams to ensure security decisions are defaults. Requirements: Experience with FedRAMP authorization (Agency or JAB, Moderate or above). Deep AWS experience and strong infrastructure-as-code fundamentals. Ability to manage both engineering tasks and documentation (e.g., writing control narratives and fixing Terraform). Familiarity with SOC 2, StateRAMP, continuous monitoring tools, and threat modeling. Bonus: Experience with Node/TypeScript, PostGIS, and GovTech/public sector delivery. Benefits: Mission-driven work with a focus on real-world problems and community impact. Opportunity to be a key part of a small, growing team with meaningful influence. Supportive environment with feedback and learning opportunities. Flexible work arrangements (hybrid or remote) with offices in NYC, San Francisco, and Portland, ME. Competitive compensation, health/vision/dental coverage, 401k plan, and wellness reimbursement.