Lead the design, management, and continuous improvement of cloud infrastructure supporting critical healthcare technology and business operations, focusing on Azure, GCP, and AWS.
Compensation
Competitive annual base salary ranging from $115,000 to $155,000.
Eligibility for an annual cash bonus, depending on applicable compensation arrangements.
Responsibilities
Design, deploy, operate, and continuously improve cloud environments across Microsoft Azure and Google Cloud Platform, with additional AWS support as needed.
Implement and maintain identity and access management using least-privilege principles (Entra ID, Azure RBAC, GCP IAM).
You’ll be the hands‑on security lead embedded with core product teams to secure agentic workloads end‑to‑end, from SDK through LangSmith/Graph services and customer integrations. You’ll define our security roadmap, land immediate hardening wins, and raise the bar on how AI infra is protected in production.
Compensation
Annual salary range: $175,000-$215,000 USD for Senior Engineers
Responsibilities
Own product & platform security: Design and drive application/infrastructure security controls across LangSmith, LangGraph, and the LangChain SDK ecosystem (Python/TS/Go).
Secure-by-default authN/Z: Evolve SSO/SAML/OIDC/SCIM, token lifecycles, service‑to‑service auth, and tenant isolation for cloud and self‑hosted customers.
Ship code & reviews: Land secure designs, write PRs, and introduce lightweight checks (linters, dependency/supply‑chain scanning, SBOM/SLSA provenance).
The DevOps Engineering Advisor is a senior, hands-on individual contributor responsible for the design, management, and continuous improvement of MRO’s cloud environments, with a primary focus on Microsoft Azure and Google Cloud Platform (GCP) and secondary exposure to Amazon Web Services (AWS).
Compensation
Pay Range USD $115,000.00 - USD $155,000.00 /Yr.
Responsibilities
Design, deploy, operate, and continuously improve cloud environments in Azure and GCP (and AWS as needed), including subscription/project structure, landing zones, resource organization, tagging and labeling standards, and separation of development, test, and production environments
Manage cloud identity and access using least-privilege principles (Entra ID and Azure RBAC, GCP IAM, managed and workload identities, identity federation) in partnership with Security
Build and maintain cloud networking, including VNets/VPCs, subnets, routing, hub-and-spoke topologies, private endpoints and Private Service Connect, DNS, load balancing, and hybrid connectivity to on-premises and colocation sites
Own capacity planning, lifecycle management, patching, and upgrade planning for cloud-hosted infrastructure and platform services
Apply the pillars of the Azure Well-Architected Framework, Google Cloud Architecture Framework, and AWS Well-Architected Framework (reliability, security, cost optimization, operational excellence, and performance efficiency) to new and existing workloads
Lead engineering, automation, and product ownership for secure access across AWS, Azure, and GCP.
Compensation
The salary range for this position is 135,000.00 - 230,000.00 USD Annual and is eligible for an annual bonus based on individual and company performance.
Responsibilities
Lead the design, engineering, testing, deployment, and lifecycle management of IAM access configurations and automation for AWS, Azure, and GCP.
Own the holistic cloud IAM engineering product, including access models, platform configurations, processes, integrations, automation, documentation, operational readiness, control effectiveness, and continuous improvement.
Establish and enforce secure access patterns that prevent privilege escalation, reduce standing privilege, separate administrative duties, and apply least privilege to human and workload identities.
Provide technical direction for AWS IAM policies and roles, Azure role-based access control and privileged access capabilities, and GCP IAM roles, bindings, service accounts, and organization-level controls.
Lead development of reusable Infrastructure as Code and automation using Terraform and Python to build, validate, deploy, monitor, and remediate cloud access configurations through controlled DevOps pipelines.
The base salary for this position will fall between $200,000-$210,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.
Design and lead end‑to‑end data solutions on L.L.Bean’s Enterprise Data Platform, partnering with engineering, product, and business stakeholders to deliver scalable, secure, and high‑quality data products.
The Cybersecurity Analyst – IAM supports the operation of identity and access management controls across the Pismo platform, ensuring compliance with Visa Corporate Identity & Access Technical Security Requirements.
Compensation
For roles located in the US, the estimated salary range for this position is $112.100,00 to $ 173.400,00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity.
Responsibilities
Run periodic user access reviews and recertifications
Monitor joiner, mover and leaver events across identity provider, cloud accounts, source control and Kubernetes clusters
Review access requests and permission changes for least privilege and separation of duties
Analyse cloud and platform permissions to find excessive or orphaned access
Monitor privileged, just-in-time and break-glass access
Requirements
Bachelor's degree
Master's degree
Nice to have: advanced degree
Nice to have: certifications such as Okta Certified Administrator, Microsoft SC-300, AWS Certified Solutions Architect – Associate or Security – Specialty, CompTIA Security+
Architect identity and access management designs covering federation, MFA, RBAC/ABAC, privileged access, and DoD PKI/CAC authentication across AWS, Azure, and GCP.
Build and maintain authorization boundary diagrams, network architecture diagrams, and data-flow diagrams showing components, trust boundaries, ports, protocols, and movement of CUI and sensitive data.
Translate engineering and architecture decisions into RMF artifacts including SSP architecture sections, AC/IA/SC/AU control narratives, PPSM registrations, and significant change impact analyses.
Evaluate proposed designs and new services against NIST 800-53, DISA Cloud Computing SRG, STIGs, and FedRAMP requirements and recommend compliant alternatives.
Govern security and authorization impact of architecture changes, customer integrations, and new services, advising ISSMs and ISSOs on significance and re-authorization requirements.
DevOps EngineerNewJobgether · Remote, US
Senior IT Systems EngineerNewPantheon Systems, Inc · Remote, Ireland
Senior Cloud Security EngineerEncord · London, United Kingdom
Application Security EngineerLangChain · San Francisco, US
DevOps EngineerMRO Corporation · Remote, World
Information Systems Security EngineerSecond Front Systems · Remote, US+4 more