{"id":724543,"url":"https://alion.io/job/nexxa-security-infrastructure-engineer","title":"Security & Infrastructure Engineer","company":{"id":678767,"name":"Nexxa.AI","domain":"nexxa.ai","url":"https://alion.io/company/nexxa","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-27T05:46:45Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":127000,"period":"year","method":"role_country_seniority_unknown","sample_n":259},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"VPN","optional":false},{"name":"Amazon ECS","optional":true},{"name":"Amazon EKS","optional":true},{"name":"EU AI Act","optional":true},{"name":"Google Workspace","optional":true},{"name":"ISO 42001","optional":true},{"name":"Kubernetes","optional":true},{"name":"Pulumi","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-08-27T08:13:52Z","employer_posted_date":"2026-08-27","last_verified_at":"2026-10-28T00:29:02Z","board_verified":true,"closed_at":null,"days_open":61,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":61},"description":"Nexxa is building the best AI systems for heavy industries - enabling machines, systems, and operations to think, decide, and act autonomously across manufacturing, large-scale infrastructure, logistics, and legacy environments.\nOur mission is to translate deep technical breakthroughs into operational reality, solving some of the hardest systems-level problems in industry.\nAbout the Role\nSelling autonomous systems into manufacturing, infrastructure, and logistics means our customers audit us before they trust us - security and compliance are a precondition for deploying our platform, not a function beside it.\nWe hold SOC 2 Type 2 and ISO 27001, and we're moving toward more certifications because governing autonomous industrial systems responsibly is a commercial requirement in our market. You'll own our certification programs and the security and infrastructure underneath them - across our multi-account AWS organization, GCP footprint, and internal engineering platform. This role covers our own corporate and cloud environments, not customer plant-floor or control-system security.\nThis role is ideal for candidates who want real, ongoing ownership of a security function, including standing up and running one of the industry's first AI management systems, at a company where trust and compliance directly determine whether customers deploy the platform at all.\nWhat You'll Do\nOwn the compliance calendar across SOC 2 Type 2 and ISO 27001 - evidence collection, access and vendor reviews, control monitoring, internal audit, management review, policy refresh, and audit readiness\n\nTriage security findings across cloud posture, code scanning, dependencies, and secrets, and drive remediation to closure\n\nRemediate what you triage directly in infrastructure as code, IAM policy, and pipeline configuration\n\nAdminister identity and access across cloud and SaaS, including SSO/federation, least-privilege roles, and the joiner/mover/leaver lifecycle\n\nSupport internal IT operations - endpoint fleet and device compliance, SaaS and license administration, asset inventory, support requests - while keeping the human cost of them flat as the company grows\n\nServe as the working interface to external auditors, our certification body, and customer security and procurement reviews\n\nBuild controls into infrastructure so they hold automatically, replacing manual verification with guardrails that fail closed\n\nHarden CI/CD and the software supply chain - build identity, artifact provenance, dependency and secret hygiene\n\nDebug production issues across cloud infrastructure, containers, and networking, and write the postmortem that keeps the fix from being forgotten\n\nProduce documentation others rely on: runbooks, control narratives, architecture notes, postmortems\n\nRequired Qualifications\nProfessional experience in security engineering, infrastructure/platform engineering, or a closely related technical role - broad competence across security, networking, and operating systems, with real depth in at least one\n\nDeep hands-on experience with:\nSecurity fundamentals - trust boundaries and blast radius, authentication vs. authorization, least privilege, secrets handling, and judging real-world exploitability of findings\n\nNetworking - diagnosing connectivity issues across routing, firewalls/security groups, DNS, TLS termination, and proxies; comfortable with VPN/private connectivity and packet captures\n\nLinux operating systems - processes, filesystems, permissions, systemd, resource limits, log analysis, and how containers relate to the host\n\nCloud infrastructure - hands-on with AWS or GCP beyond the console: IAM, networking, compute, and their failure modes\n\nStrong scripting/automation skills (Python, Bash, Go, or similar) - recurring manual work gets scripted away, not tracked by hand\n\nStrong writing ability: control narratives, runbooks, postmortems, audit responses, risk assessments\n\nProven judgment under ambiguity - able to rank findings honestly and defend the ranking\n\nCS/CE degree or equivalent hands-on experience\n\nPreferred Qualifications\nHands-on ISO 27001 experience - operating an ISMS, recertification, surveillance audits, internal audit programmes, Statement of Applicability, risk treatment\n\nSOC 2 experience in practice - producing evidence, answering auditor requests, remediating findings against a real deadline\n\nAny exposure to AI governance or ISO 42001 - AI risk assessment, model inventory, AI lifecycle controls, the EU AI Act\n\nInfrastructure as code at scale (Pulumi primarily, Terraform secondarily - deep Terraform experience transfers fine)\n\nMulti-account cloud organization experience: landing zones, org-level policy guardrails, centralized logging, cross-account access patterns\n\nIdentity provider and endpoint management at scale (Google Workspace or Microsoft 365, SSO/SAML/OIDC, MDM and device compliance tooling)\n\nCloud security tooling experience (CSPM, SAST/SCA, vulnerability management platforms), including their false-positive rates\n\nContainer orchestration on ECS, EKS, or Kubernetes\n\nObservability: metrics, logs, traces, and the judgment to instrument what will matter later\n\nExperience across both AWS and GCP, including workload identity federation\n\nCloud cost awareness - you notice when spend and value diverge\n\nStartup or high-growth experience building process rather than following one\n\nWhat Success Looks Like\nYou can own ambiguous, high-stakes security and compliance problems end-to-end\n\nControls you build hold automatically as the company scales - you design for guardrails that fail closed, not recurring manual verification\n\nYou bring strong technical judgment on tradeoffs between security rigor, velocity, and cost\n\nYou raise the bar for security rigor and operational discipline across the team\n\nYou help define what's next for the security program, not just execute what's known\n\nWhy Join Nexxa.ai?\nInnovative Environment: Play a critical role in transforming heavy industries through groundbreaking AI and automation technologies\n\nCollaborative Culture: Be part of a team that values innovation, discipline, and continuous improvement\n\nProfessional Growth: Benefit from significant opportunities for career development and advancement\n\nCompetitive Compensation: Enjoy a comprehensive salary and equity package reflective of your expertise and contributions\n\nIf you're passionate about building the security and compliance backbone for advanced AI solutions in the real world, we'd love to connect.","description_format":"text","description_chars":6494,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"},{"name":"Toronto","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","Manufacturing & Industrial Software"],"lifecycle":[{"event":"open","at":"2026-09-11T07:59:23Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.457,"p_room":0.28,"age_days":60,"expected_fill_days":21,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/nexxa-security-infrastructure-engineer","json_url":"https://alion.io/job/nexxa-security-infrastructure-engineer.json","meta":{"generated_at":"2026-10-28T04:05:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5388,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678767},"rest":"https://alion.io/mcp/rest/get_company?id=678767"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnexxa-security-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnexxa-security-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnexxa-security-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nexxa-security-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnexxa-security-infrastructure-engineer"}]}