Security & Infrastructure Engineer
About The Position
PointOne is hiring a senior engineer to own the security, scalability, and cost efficiency of its AWS environment. This hands-on engineering role combines security, cloud architecture, and platform optimization. The engineer will harden AWS infrastructure, reduce blast radius and unnecessary exposure, and ensure systems scale efficiently and securely. The role focuses on engineering and architectural decisions rather than GRC or paperwork-heavy compliance or vulnerability scanning alone. The position includes responsibility for infrastructure security, detection and response, and AWS scale and cost optimization. The engineer will shape critical systems and make architectural decisions that affect risk and resilience, and will serve as a core architect of PointOne’s long-term security posture. This is intense early-stage startup work requiring ownership, comfort with ambiguity, and the ability to build connections between customers and the product. PointOne builds infrastructure for the legal industry, powering timekeeping and billing systems used by law firms and government agencies. Its systems process highly confidential data for institutions working on sensitive matters. Compensation depends on factors including prior experience and expertise, and a competitive equity component is offered. Benefits include comprehensive health, dental, and vision insurance, meals in the office, regular team events, and more.
Requirements
- At least 5 years operating AWS infrastructure in production.
- Deep IAM expertise, including roles, policies, trust relationships, and STS.
- Strong AWS networking knowledge, including VPC, PrivateLink, and Security Groups.
- Experience designing multi-account AWS environments.
- Hands-on experience responding to real security incidents.
- Strong understanding of cloud attack vectors and privilege escalation.
- Experience reducing cloud costs without compromising security.
- Comfort working directly in CDK/Terraform and reviewing infrastructure code.
Nice To Haves
- Experience in legal, fintech, government, or other high-sensitivity environments.
Responsibilities
- Design and enforce least-privilege IAM across services.
- Implement permission boundaries and an AWS Organizations SCP strategy.
- Reduce attack surface across networking and service exposure.
- Improve secrets management and KMS key segmentation.
- Lead threat modeling across core systems.
- Design strategies for blast-radius containment.
- Strengthen logging, monitoring, and anomaly detection.
- Ensure logs are immutable and auditable.
- Build and test incident response playbooks.
- Review new infrastructure designs for security risks.
- Optimize AWS architecture for reliability and efficiency.
- Improve Lambda and SQS concurrency and scaling patterns.
- Evaluate and improve RDS scaling strategy.
- Drive principled tradeoffs between isolation, performance, and cost.
- Take ownership and bring structure to ambiguity while building connections between customers and the product.
Benefits
- Competitive equity component.
- Comprehensive health insurance.
- Dental insurance.
- Vision insurance.
- Meals in the office.
- Regular team events.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
