Corporate Security Engineer, IAC & Automation

About the role

As a Corporate Security Engineer at OnePay, you will lead the design, implementation, and optimization of our corporate security infrastructure. You will enhance security controls, align goals with business objectives, and drive automation and self-service capabilities to maintain a strong security posture in a rapidly scaling environment.

Responsibilities

• Lead the design, implementation, and optimization of our corporate security infrastructure.
• Enhance security controls, align goals with business objectives, and drive automation and self-service capabilities to maintain a strong security posture in a rapidly scaling environment.
• Work with IaC tools like Terraform to ensure enterprise configurations are steady, change-managed, and machine-readable.
• Design and deploy endpoint security measures aligned with industry standards, including vulnerability management.
• Ensure a strong security posture for corporate SaaS applications by configuring vendor capabilities or building automations to meet OnePay standards.
• Mature and manage data protection controls, including Data Loss Prevention (DLP) tools and secure data handling processes.
• Build secure methods for sharing data with internal teams and external partners.
• Collaborate with IT, Infrastructure, and Security teams to implement security measures, maintain critical corporate systems (ensuring availability and compliance), and drive process improvement through automation.
• Develop and run incident response and disaster recovery plans, including tabletop exercises.

Requirements

• 5+ years of IT experience, including 3+ years in enterprise security within cloud environments.
• Expertise in IaC tools like Terraform (preferred), Puppet, Chef or Ansible.
• Proven ability to lead projects, drive measurable security improvements through automation, leveraging scripting (Python, Go, and/or TypeScript).
• Solid understanding of networking, authentication standards, and security frameworks (MITRE ATT&CK, NIST CSF, CIS benchmarks), with hands-on experience in ZTNA and DLP solutions (e.g., Netskope, Zscaler).
• Skilled at simplifying technical concepts for non-technical audiences and influencing decisions.
• Experience with workflow automation tools like n8n is a plus.

Qualifications

• Experience with Node and TypeScript on the server, leveraging the NestJS framework within a microservice-oriented architecture running on Kubernetes and AWS.
• Experience with React Native on the client side, building and shipping product features for iOS, Android, and web platforms.

Skills

• Strong problem-solving skills.
• Excellent communication and collaboration abilities.
• Ability to work independently and as part of a team.

Benefits

• Competitive base salary, stock options, and health benefits from Day 1.
• 401(k) plan with company match.
• Remote-friendly (US), flexible time off (FTO), and opportunities for growth.
• A high-growth, mission-driven, inclusive culture where your work has real impact.

Pay

Competitive base salary, stock options, and health benefits from Day 1.

Schedule

Remote-friendly (US), flexible time off (FTO).

Benefits

• 401(k) plan with company match.
• Flexible time off (FTO).
• Opportunities for growth.
• A high-growth, mission-driven, inclusive culture where your work has real impact.

Company Culture

• High-growth, mission-driven, inclusive culture.
• Your work has real impact.

Equal Employment Opportunity

To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply.