Hosted Ops, Cloud Security & Compliance Engineer

Summary/Objective:

The Cloud Security & Compliance Architect is responsible for the security architecture, operational security controls, and compliance posture of the organization’s AWS-hosted SaaS platform. This role combines hands‑on operational security with strategic responsibility for ensuring the platform meets industry compliance frameworks and security best practices.

This position plays a critical role in defining and implementing security standards across the hosted platform including infrastructure security, access control, encryption practices, backup strategies, and regulatory compliance. The role will contribute directly to platform security architecture decisions and ensure the platform maintains compliance with SOC 2 and other industry standards.

• Design and maintain the security architecture of the AWS-hosted platform
• Establish and maintain operational security controls across cloud infrastructure and hosted services
• Lead technical decision‑making related to platform security standards and security architecture
• Implement and monitor AWS security configurations including IAM policies, network security groups, and infrastructure access controls
• Ensure encryption standards are maintained for data at rest and data in transit
• Maintain and review backup protocols and disaster recovery procedures
• Support compliance initiatives including SOC 2 and ISO 27000 series frameworks
• Assist in preparation for external security audits and compliance assessments
• Monitor system logs and security alerts to identify potential security incidents or vulnerabilities
• Manage IP access policies and ensure secure network configurations across environments
• Collaborate with engineering and platform teams to integrate security best practices into deployments and infrastructure design
• Evaluate new security tools and technologies to improve the platform’s security posture
• Support incident response procedures related to security events
• Ensure platform operations align with applicable data protection regulations including considerations for GDPR where applicable

• Bachelor’s Degree in Cybersecurity, Information Systems, Computer Science, or related field
• Experience securing AWS cloud environments and infrastructure
• Strong understanding of cloud security principles including identity management, network security, and encryption
• Experience supporting SOC 2 compliance frameworks for hosted SaaS platforms
• Experience implementing operational security controls in production cloud environments
• Knowledge of vulnerability management and security monitoring practices
• Understanding of backup and disaster recovery security requirements
• Ability to participate in architectural decisions regarding platform security design
• Experience reviewing and improving cloud security posture across multiple services

• Experience with ISO 27001 / ISO 27002 frameworks
• Familiarity with GDPR data protection requirements
• AWS Security certification or similar security credentials
• Experience with cloud security monitoring tools
• Familiarity with geospatial platforms or Esri environments
• Experience securing large‑scale SaaS environments

This is a remote work from home position.