Security & Infrastructure Engineer
Nexxa.AI · Remote · Toronto - Canada ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote
- Security & Compliance
- AWS + GCP
- SOC 2 + ISO 27001
- Senior level
You will lead security and compliance efforts for Nexxa’s autonomous industrial AI platform, ensuring trust through rigorous certification management. The role involves owning SOC 2 Type 2 and ISO 27001 programs while securing multi-account AWS and GCP infrastructure.
Responsibilities include automating security guardrails, managing identity access, and serving as the primary contact for external auditors. You will bridge technical infrastructure security with corporate IT operations to support company growth.
What you'll do
- Manage SOC 2 Type 2 and ISO 27001 compliance calendars and audit readiness
- Triage and remediate security findings in cloud posture and code dependencies
- Administer identity and access management including SSO and lifecycle processes
- Support internal IT operations such as endpoint compliance and asset inventory
- Serve as the main interface for external auditors and customer security reviews
- Build automated infrastructure controls and guardrails to replace manual checks
- Harden CI/CD pipelines and secure the software supply chain
- Debug production infrastructure issues and write detailed postmortems
What you'll need
- Professional experience in security or infrastructure engineering roles
- Deep knowledge of security fundamentals like least privilege and secrets handling
- Strong networking skills including DNS, TLS, firewalls, and packet analysis
- Proficiency with Linux operating systems, containers, and log analysis
- Hands-on experience with AWS or GCP IAM, networking, and compute services
- Strong scripting abilities in Python, Bash, Go, or similar languages
- Excellent writing skills for runbooks, policies, and audit responses
- Ability to make sound judgments under ambiguity regarding risk rankings
Nice to have
- Hands-on experience operating an ISMS for ISO 27001 certification
- Practical experience producing evidence for SOC 2 audits
- Familiarity with AI governance frameworks or ISO 42001
- Experience with Infrastructure as Code using Pulumi or Terraform
- Knowledge of multi-account cloud organizations and landing zones
- Experience with identity providers like Google Workspace or Microsoft 365
- Familiarity with cloud security tools such as CSPM and SAST/SCA
- Experience with container orchestration on ECS, EKS, or Kubernetes
Stack
- AWS
- GCP
- Python
- Bash
- Go
- Pulumi
- Terraform
- Kubernetes
- ECS
- EKS
- Linux
How you'll work
- Fully remote position
- Global availability implied
What you get
- Competitive salary package
- Equity compensation
- Opportunities for career development
- Collaborative and innovative culture