Security & Infrastructure Engineer

PointOne builds infrastructure for the legal industry, powering timekeeping and billing systems used by law firms and government agencies. We build and operate systems that process the most confidential data for institutions working on the most sensitive matters. Security is a strategic priority.

About the role

This is a hands-on engineering role at the intersection of security, cloud architecture, and platform optimization. You will harden our AWS infrastructure, reduce blast radius, eliminate unnecessary exposure, and ensure our systems scale efficiently and securely.

Responsibilities

• Design and enforce least-privilege IAM across services
• Implement permission boundaries and SCP strategy
• Reduce attack surface across networking and service exposure
• Improve secrets management and KMS key segmentation
• Lead threat modeling across core systems
• Design blast-radius containment strategies
• Strengthen logging, monitoring, and anomaly detection
• Ensure logs are immutable and auditable
• Build and test incident response playbooks
• Review new infrastructure designs for security risks
• Optimize AWS architecture for reliability and efficiency
• Improve Lambda/SQS concurrency and scaling patterns
• Evaluate and improve RDS scaling strategy
• Drive principled tradeoffs between isolation, performance, and cost

Requirements

• 5+ years operating AWS infrastructure in production
• Deep IAM expertise (roles, policies, trust relationships, STS)
• Strong AWS networking knowledge (VPC, PrivateLink, Security Groups)
• Experience designing multi-account AWS environments
• Hands-on experience responding to real security incidents
• Strong understanding of cloud attack vectors and privilege escalation
• Experience reducing cloud cost without compromising security
• Comfortable working directly in CDK/Terraform and reviewing infrastructure code

Strong plus: Experience in legal, fintech, government, or other high-sensitivity environments.

Why This Role Matters

A security breach at PointOne would have consequences extending far beyond the survival of our company. This role exists to:

• Protect sensitive institutions
• Raise the engineering bar on secure system design
• Build infrastructure that enterprise and government customers can trust

Benefits

• Comprehensive health, dental, and vision insurance
• Meals in office
• Regular team events