Lead, Cloud & Security Operations Engineer

Position Summary
The Lead Cloud & Security Operations Engineer is a senior-level, hands-on technical role responsible for implementing and operating security controls across TabaPay’s hybrid infrastructure environment, including AWS, colocation data centers, on-prem production systems, and corporate SaaS platforms (Microsoft 365, Confluence, Jira, etc.).

This position will establish and evolve independent security capabilities in support of regulatory compliance obligations, including PCI, GLBA/FFIEC, SOC 1/2, and RPAA (Canada).

This is a lead-level individual contributor role with future leadership growth potential.

Key Responsibilities
Cloud & Infrastructure Security

• Design, implement, and maintain security controls in AWS environments
• Secure hybrid infrastructure including colocation and on-prem production systems
• Configure and manage firewalls, network segmentation, and cloud-native security services
• Implement centralized logging and monitoring (SIEM)
• Manage security products and configuration of corporate computing assets
• Lead vulnerability management and remediation coordination

Security Operations & Incident Response

• Monitor, investigate, and respond to security alerts and incidents
• Develop detection rules and improve alert tuning
• Conduct root cause analysis and implement corrective controls

Identity & Access Security

• Implement Identify & Access Management (IAM) best practices across cloud and infrastructure environments
• Enforce least-privilege access and role-based access controls
• Partner with Risk and Policy functions to operationalize access governance

Cross-Functional Collaboration

• Work closely with Technology Operations and Engineering teams
• Support transition of security execution responsibilities from Operations to Security
• Provide security guidance during system architecture and infrastructure changes

Required Qualifications

• 7+ years of experience in cloud, infrastructure, or security engineering
• Strong hands-on experience securing AWS environments
• Experience with hybrid infrastructure (cloud + on-prem or colocation)
• Direct experience implementing or operating SIEM/logging platforms
• Experience in vulnerability management and remediation processes
• Incident response experience in production environments
• Experience working in regulated environments (PCI, SOC 2, GLBA, or similar)

Preferred Qualifications

• CISSP certification
• AWS Security Specialty or equivalent cloud certification
• Experience in fintech, payments, or financial services

Competencies

• Strong technical troubleshooting and analytical skills
• Ability to work independently in a fast-paced growth environment
• Clear written and verbal communication skills
• Ability to balance security risk reduction with operational enablement
• High accountability and ownership mindset

Physical & Other Requirements

• Ability to work in a hybrid or office-based environment as required

Career Path
This position is expected to evolve