Security & Infrastructure Engineer

Job summary

Nexxa is seeking a Security & Infrastructure Engineer to own compliance programs and manage security across their AWS and GCP environments. The role involves triaging security findings, administering identity and access, and supporting internal IT operations while ensuring security and compliance standards are met.

Qualifications

• Professional experience in security engineering, infrastructure/platform engineering, or a closely related technical role
• Deep hands-on experience with security fundamentals
• Networking — diagnosing connectivity issues
• Linux operating systems
• Cloud infrastructure — hands-on with AWS or GCP
• Strong scripting/automation skills (Python, Bash, Go, or similar)
• Strong writing ability
• Proven judgment under ambiguity
• CS/CE degree or equivalent hands-on experience

Responsibilities

• Own the compliance calendar across SOC 2 Type 2 and ISO 27001
• Triage security findings across cloud posture, code scanning, dependencies, and secrets
• Remediate what you triage directly in infrastructure as code, IAM policy, and pipeline configuration
• Administer identity and access across cloud and SaaS
• Support internal IT operations
• Serve as the working interface to external auditors
• Build controls into infrastructure
• Harden CI/CD and the software supply chain
• Debug production issues across cloud infrastructure
• Produce documentation others rely on

Skills

Relocation