> Markdown version of [/jobs/ext/2714834-security-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/2714834-security-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security & Infrastructure Engineer

- **Company:** POINTONE LLC
- **Location:** New York, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Engineering, Program Optimization, Identity and Access Management, Data Logging, Amazon Virtual Private Cloud (VPC), Amazon Simple Queue Service (SQS), Terraform, Vulnerability Analysis
- **Published:** September 4, 2026
- **Apply:** https://startup.jobs/security-infrastructure-engineer-pointone-8133557

## About the Role

* 5+ years operating AWS infrastructure in production
 * Deep IAM expertise (roles, policies, trust relationships, STS)
 * Strong AWS networking knowledge (VPC, PrivateLink, Security Groups)
 * Experience designing multi-account AWS environments
 * Hands-on experience responding to real security incidents
 * Strong understanding of cloud attack vectors and privilege escalation
 * Experience reducing cloud cost without compromising security
 * Comfortable working directly in CDK/Terraform and reviewing infrastructure code

Strong plus: Experience in legal, fintech, government, or other high-sensitivity environments.

## Description

PointOne builds infrastructure for the legal industry, powering timekeeping and billing systems used by law firms and government agencies.

We build and operate systems that process the most confidential data for institutions working on the most sensitive matters. Security for us is a strategic priority.

We're hiring a senior engineer to own the security, scalability, and cost efficiency of our AWS environment.

The Role

Let's start with what this isn't:

 * Not a GRC or paperwork-heavy compliance role
 * Not a vulnerability-scanning-only position
 * Not a "turn on GuardDuty and call it done" role

You will be shaping critical systems and making architectural decisions that materially affect risk and resilience.

This is a hands-on engineering role at the intersection of security, cloud architecture, and platform optimization.

You will harden our AWS infrastructure, reduce blast radius, eliminate unnecessary exposure, and ensure our systems scale efficiently and securely.

What You'll Own

Infrastructure Security

 * Design and enforce least-privilege IAM across services
 * Implement permission boundaries and SCP strategy
 * Reduce attack surface across networking and service exposure
 * Improve secrets management and KMS key segmentation
 * Lead threat modeling across core systems
 * Design blast-radius containment strategies

Detection & Response

 * Strengthen logging, monitoring, and anomaly detection
 * Ensure logs are immutable and auditable
 * Build and test incident response playbooks
 * Review new infrastructure designs for security risks

Scale & Cost

 * Optimize AWS architecture for reliability and efficiency
 * Improve Lambda/SQS concurrency and scaling patterns
 * Evaluate and improve RDS scaling strategy
 * Drive principled tradeoffs between isolation, performance, and cost


## Related Videos

- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity)
- [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform)
- [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)