Systems & Security Engineer

AVATAR FLEET LLC•Bath Township, OH

5h•Remote

About The Position

AvatarFleet is hiring a Systems & Security Engineer to own day-to-day security administration and infrastructure operations, working closely with the CTO and software engineering team. About half of the role is focused on security administration—including vulnerability management, patching, mitigation, and SOC 2 Type II compliance—and the remainder on systems administration, production reliability, and engineering delivery support. These areas overlap throughout the workday. The role is responsible for keeping AvatarFleet’s AWS-based SaaS infrastructure secure, reliable, and continuously audit-ready. The environment is EC2-heavy and requires strong Linux administration and experience maintaining production applications on Linux hosts. The engineer will also support ECS and AWS services including WAF, ALB, S3, and EFS, as well as CI/CD in partnership with software engineers. Application uptime is a core responsibility. The position maintains patched and hardened systems, effective monitoring, tested backups, documented controls, and dependable deployment processes. It owns infrastructure operations, security administration, patching and mitigation, and operational work supporting SOC 2 Type II compliance. The CTO and other business control owners share responsibility for company-wide compliance; software engineering owns application features and application code. This is a fully remote role. Candidates must reside in the United States, and the posting limits eligible residents to Idaho, Nebraska, Georgia, Ohio, Texas, Tennessee, Pennsylvania, Michigan, or Florida. The engineer should maintain a professional, confidential workspace with reliable high-speed internet, use video conferencing and online collaboration tools regularly, and be available during established core business hours. Flexibility is required for production incidents, urgent security updates, maintenance windows, critical releases, and audit deadlines, including occasional work outside core business hours.

Requirements

At least 5 years of hands-on Linux systems administration, with responsibility for security and availability in production environments.
Strong AWS administration skills, especially EC2 and Linux-hosted applications, with working experience across ECS, IAM, networking, load balancing, storage, WAF, and monitoring.
Practical experience supporting SOC 2 Type II audits and maintaining controls throughout the audit period, including evidence collection, access reviews, and remediation tracking.
Hands-on experience with vulnerability management, Linux patching, security hardening, log analysis, and incident response.
Experience with Terraform, Ansible, AWS CLI, shell scripting, Docker, and Docker Compose.
Experience supporting CI/CD pipelines and troubleshooting deployment failures in collaboration with software engineers.
Ability to troubleshoot across Linux, AWS, networking, containers, databases, storage, and application runtimes.
Clear written communication, disciplined documentation, and sound prioritization based on risk, customer impact, and urgency.
Must reside in the United States; eligible states specified in the posting are Idaho, Nebraska, Georgia, Ohio, Texas, Tennessee, Pennsylvania, Michigan, and Florida.
Maintain a professional workspace that supports focus, confidentiality, and productivity, with reliable high-speed internet access.
Be available during established core business hours and communicate proactively about availability; provide flexibility for occasional work outside those hours.

Nice To Haves

SaaS experience.
PostgreSQL and Redis administration, backup and recovery, and performance troubleshooting.
Python scripting, GitHub workflows, and familiarity with Flask, JavaScript, Vue, Jira, and Sentry.
Experience improving operational monitoring, disaster recovery, and infrastructure cost efficiency.

Responsibilities

Own day-to-day security administration and coordinate SOC 2 Type II control execution, evidence collection, and annual audit preparation with the CTO and other control owners.
Maintain a year-round control calendar and track recurring reviews, evidence requirements, remediation commitments, and audit requests through completion.
Maintain security policies and operating procedures that reflect actual practices; identify control gaps and drive corrective action.
Administer access controls and support access reviews, least privilege, credential management, and security logging; keep records audit-ready.
Run and review vulnerability assessments, prioritize findings, and track them through verified resolution.
Own routine and urgent patching of Linux hosts, application dependencies, container images, and supporting software in partnership with engineering.
Plan maintenance, validate changes, confirm remediation, and apply and document mitigations or approved exceptions when immediate patching is not practical.
Deploy, configure, and maintain AWS resources, including EC2, ECS, WAF, ALB, S3, EFS, IAM, and networking components.
Maintain secure configurations, appropriate capacity, reliable connectivity, and effective monitoring across production and supporting environments.
Manage backups, replication, retention, restore testing, and secure data disposal in line with operational and compliance requirements.
Improve infrastructure performance and cost efficiency while protecting application availability.
Administer Debian and Amazon Linux hosts, including services, packages, permissions, storage, networking, and system configuration.
Maintain production applications on EC2 hosts and troubleshoot across the operating system, application runtime, containers, network, and storage.
Support Docker, Docker Compose, and ECS workloads; keep configurations consistent and operating procedures documented.
Maintain infrastructure and security monitoring, log collection, and alerting; investigate alerts and respond to service interruptions.
Restore service promptly, communicate impact and progress, and coordinate with engineering during production incidents.
Investigate root causes, document incidents, and implement improvements that reduce recurrence.
Maintain recovery procedures and operational runbooks, and validate backup and recovery processes.
Support software engineering with CI/CD configuration, deployment environments, build and release troubleshooting, and secure pipeline access.
Help maintain dependable deployments, configuration and secrets management, rollback procedures, and environment consistency.
Partner with engineers to diagnose infrastructure and runtime issues affecting development, testing, and production.
Use Terraform, Ansible, AWS CLI, and scripting to automate provisioning, configuration, patching, and recurring operational tasks.
Keep infrastructure changes reviewable and reproducible; maintain system documentation, runbooks, and audit evidence.
Work with engineering, technical support, and leadership to resolve issues and prioritize work by security risk, availability, and customer impact.