Build and operate the cloud platform for Fig’s digital banking products, owning AWS infrastructure, CI/CD, networking, observability, and security controls.
Compensation
Expected base salary range between $150,000 - $170,000, plus the opportunity to earn an annual incentive bonus tied to performance
Responsibilities
Run and evolve multi-account AWS environment on Control Tower
Manage infrastructure in Terraform
Make infrastructure changes safe and auditable through policy-as-code
Design, build, and maintain reusable Terraform modules and CDK constructs for landing zones, VPC/networking, compute, databases, and security controls across multiple accounts/environments
Implement and operate Github Actions for app and platform workloads; declarative config, drift detection, and progressive delivery (canary/blue‑green)
Enforce least‑privilege IAM, KMS encryption, Secrets Manager/Parameter Store, GuardDuty/Security Hub, CloudTrail/Lake; contribute to SOC 2/ISO27001/CIS hardening and policy‑as‑code
Evolve AWS Organizations/Control Tower/SCPs, cross‑account roles, and shared services (observability, CI/CD, artifact registries, networking) with clear blast‑radius boundaries
Partner with teams to decompose monoliths via the strangler‑fig pattern, carve‑outs, and data migration strategies; define microservice standards (contracts, observability, release patterns)
Lead/Principal AWS Cloud Infrastructure Engineer responsible for design, standardization, and operation of enterprise AWS infrastructure at scale.
Locations (5)
Pune, Maharashtra, India
Hyderabad, Telangana, India
Kolkata, West Bengal, India
Bangalore, India
Coimbatore, Tamil Nadu, India
Responsibilities
Lead the design and implementation of AWS landing zones, multi-account structures, and platform foundations using Control Tower, Organizations, and the Well-Architected Framework.
Lead and manage the enterprise cybersecurity program across cloud, OT/ICS, endpoint, identity, and network domains for a high‑tech manufacturing environment.
Locations (2)
Emeryville, California, United States
Santa Clara, California, United States
Compensation
$240,000—$280,000 USD
Responsibilities
Lead detection and response program at strategic level
Implement automation to reduce alert fatigue
Mature SIEM and cloud‑native logging architectures
Define and enforce security controls and standards
Drive long‑term improvements to cloud and infrastructure security
Requirements
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related technical field
Design, implement, and operate cloud security architectures across AWS and GCP, extend security to AI/ML workloads, and lead security initiatives for a multi‑account, multi‑region cloud estate.
Responsibilities
Design, implement, and operate cloud security architectures across AWS and GCP
Build and maintain preventive and detective guardrails at scale
Embed security into infrastructure‑as‑code pipelines
Secure container and Kubernetes workloads
Own vulnerability management across the cloud estate
Requirements
Bachelor's degree or equivalent practical experience
Nice to have: AWS Certified Security – Specialty
Nice to have: Google Professional Cloud Security Engineer
As a Principal Cloud Security Engineer, Product Security, you provide technical leadership for the security of the cloud environments that host HealthEquity's products and platforms. You design posture management, policy-as-code guardrails, and automated controls.
Responsibilities
Lead the architecture and ongoing evolution of cloud security posture management across a large multi-subscription estate using CNAPP/CSPM tooling.
Design and build policy-as-code preventive guardrails, including service control policies, Azure Policy, and infrastructure-as-code validation in CI/CD.
Own the security architecture for cloud landing zones and account and subscription provisioning.
Build event-driven auto-remediation that enforces security and compliance baselines at scale.
Lead network exposure reduction for customer-facing applications, including web application firewall rule management and tighter security group ingress.
Define and own infrastructure standards, reference architectures, and reusable Infrastructure-as-Code (Terraform) modules consumed across teams.
Architect and govern networking at scale — Transit Gateway, VPC design, VPN/Direct Connect, Route 53, PrivateLink, IPAM, and egress/SASE controls — within AWS service limits.
Establish governance, security, and compliance frameworks — SCPs, IAM/identity models, KMS/Secrets Manager strategy, Config rules, tagging, and security baselines.
Drive reliability engineering — multi-AZ/multi-region HA and DR design, backup strategy, capacity/quota planning, observability, and SLOs.
Senior DevOps EngineerFig · Toronto, Canada
DevOps EngineerBusPatrol · Hyderabad, India
Manager - AWS Cloud InfrastructureCognizant · Pune, India+4 more
Technical Manager, Information SecurityAtomic Machines · Emeryville, US+1 more
Principal Cloud Security EngineerHealthEquity · Remote, US