> Markdown version of [/jobs/ext/568864-senior-it-compliance-engineer](https://www.wearedevelopers.com/jobs/ext/568864-senior-it-compliance-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT & Compliance Engineer - **Company:** SUNFLARE, LLC - **Location:** Orlando, FL, United States - **Experience:** Expert - **Salary:** $95,000.0 - $120,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, JIRA, Bash Shell, Cloud Computing, Cloud Computing Security, Domain Name System (DNS), Federated Identity Management, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Key Management, Routing, OpenID, Peering, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, Multi-Cloud, Firewalls (Computer Science), Information Technology, Patch Management, Gsuite, Terraform - **Published:** June 14, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=0805e076fdbbb179 ## About the Role Do you have experience in Terraform?, * Multi-cloud depth: 7+ years across IT, cloud infrastructure, and security, with hands-on experience in both AWS and GCP. * Workplace administration: Strong administration of Microsoft 365 / Entra ID and Google Workspace - identity, directory, group, and license management. * IT consolidation: Proven experience merging or migrating duplicated systems (Jira / Slack / email tenants, domain and identity unification, or post-merger IT integration) with minimal disruption. * Compliance: Hands-on experience running or supporting SOC 2, HIPAA, HITRUST, or NIST-based programs, including evidence collection and audit support. * Networking & identity: Solid VPN, routing, firewall, and DNS fundamentals; plus SSO (SAML / OIDC), SCIM, and identity federation. * Automation: Infrastructure as code (Terraform) and scripting (Python / Bash). Nice to have * Healthcare / health-tech experience handling PHI or other regulated data. * Post-merger or multi-entity IT integration experience at a startup or scale-up. * Certifications such as Google Professional Cloud Security Engineer, AWS Security Specialty, CISSP, CISA, or HCISPP. ## Description * Security & compliance. Run the recurring security and compliance program across AWS and GCP - posture review, encryption and key management, vulnerability and patch management, and endpoint hardening - driving remediation to closure and producing audit-ready evidence. * Cloud & IT infrastructure. Operate and harden core infrastructure (IAM, VPCs and network controls, secrets); codify guardrails as code (Terraform); and own backup and disaster-recovery testing with validated RPO/RTO. * IT consolidation. Lead the merge of duplicated collaboration and productivity systems - Jira, Slack, and email across Microsoft 365 and Google Workspace - onto single platforms, with clean migration, identity and license unification, and decommissioning of retired tooling. * Networking. Design and operate secure connectivity within and between clouds - VPN tunnels, peering, routing, DNS, and firewall policy - including links to partner, lab, and clinical-integration endpoints under our zero-trust model. * Identity & single sign-on. Build and run the customer identity layer (GCIP) and enterprise SSO (SAML / OIDC) with SCIM provisioning, keeping workforce and customer identity planes cleanly separated. * Audit, risk & governance. Drive SOC 2 Type II readiness and HIPAA audit support; maintain the risk register, BIA/BCP, third-party and BAA reviews, and the privacy program; and respond to customer security questionnaires. ## Related Videos - [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Building Applications with Infrastructure as Code](https://www.wearedevelopers.com/videos/887-building-applications-with-infrastructure-as-code) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)