Remote Staff Software Engineer, Internal Platform Infrastructure, Compliance

Summary

Join our HashiCorp Platform Infrastructure team as a Staff Infrastructure Engineer focused on Compliance to ensure our infrastructure systems and processes align with industry standards and regulatory requirements.

Requirements

• Minimum of 7 years experience in designing and delivering enterprise cloud infrastructure security and compliance solutions
• Strong understanding and experience working with compliance frameworks such as SOC 2, ISO 27001, PCI-DSS, HIPAA, and GDPR
• Proven experience in implementing and managing infrastructure security controls in cloud (AWS, Azure, Google Cloud) and on-premise environments
• Hands-on experience with compliance automation tools (e.g., AWS Config, Azure Policy, HashiCorp Sentinel)

Responsibilities

• Partner with security, legal, and risk management teams to interpret compliance requirements and translate them into technical specifications for the infrastructure team
• Design, develop, and manage infrastructure risk and policy management frameworks, identifying and mitigating potential compliance risks related to infrastructure design and operation
• Ensure proper auditing and logging mechanisms are in place to meet compliance standards, and facilitate regular compliance reviews and audits
• Implement and enforce security policies, procedures, and controls to ensure infrastructure compliance with industry regulations
• Develop and maintain comprehensive documentation of infrastructure compliance policies, standards, and procedures
• Prepare for and support external and internal audits related to infrastructure compliance by ensuring that systems, processes, and documentation are audit-ready
• Conduct regular self-audits and vulnerability assessments to proactively identify and address compliance gaps in the infrastructure
• Assist in audit responses, providing evidence and reports to demonstrate compliance with required standards and controls
• Stay updated on changes in industry regulations and compliance requirements, ensuring that the organization’s infrastructure practices are always up to date

Benefits

Individual pay within the range will be determined based on job related-factors such as skills, experience, and education or training