Senior Security & Infrastructure Engineer

Forerunner

11d•$195,000 - $220,000•Hybrid

About The Position

As a Senior Security & Infrastructure Engineer, you will own the security and compliance posture of our AWS infrastructure end-to-end — from the authorization boundary and continuous monitoring through to the automation that keeps it all running — while driving our FedRAMP authorization forward. You'll act at the intersection of security engineering, infrastructure, and compliance, partnering directly with our compliance lead and engineering team to make security decisions land as defaults rather than review gates.

Requirements

You've been through a FedRAMP authorization before - Agency or JAB, Moderate or above - and can speak candidly about what actually consumed the time
Deep AWS experience and strong infrastructure-as-code fundamentals
Comfortable owning both the engineering and the paperwork; you can write a control narrative and also fix the Terraform it describes
Experience with SOC 2 / StateRAMP / TX-RAMP, continuous monitoring tooling, and threat modeling

Nice To Haves

Node/TypeScript environments
PostGIS
GovTech or public sector delivery

Responsibilities

Own the security and compliance posture of our AWS infrastructure (us-east-1 commercial, targeting Moderate): authorization boundary, KSI evidence, continuous monitoring, and the automation behind all of it
Drive FedRAMP execution alongside our compliance lead: machine-readable evidence in Vanta, control implementation, 3PAO coordination through assessment and Marketplace listing
Harden and modernize production infrastructure: IaC, network segmentation, secrets management, logging and detection in Datadog, incident response
Keep the guardrails from becoming a tax: build compliance into CI/CD and developer workflows rather than bolting it on
Partner directly with engineering (~12 people, two product teams) so security decisions land as defaults, not as review gates