{"id":3286767,"url":"https://alion.io/job/paycargo-senior-engineer-cloud-security","title":"Senior Engineer, Cloud Security","company":{"id":2202032,"name":"PayCargo","domain":"paycargo.com","url":"https://alion.io/company/paycargo","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Miami, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":160000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":6333},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"AWS","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Dependabot","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PagerDuty","optional":false},{"name":"PCI DSS","optional":false},{"name":"PKI","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Tokenization","optional":false},{"name":"CI/CD","optional":true},{"name":"LLM","optional":true},{"name":"Zero Trust","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-10-26T17:06:57Z","employer_posted_date":null,"last_verified_at":"2026-10-26T17:06:57Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"About PayCargo:\nMillions of shipments with goods and materials move around the world daily, by land, sea, or air. PayCargo is the world's leading online payment solution that is revolutionizing the shipping and cargo world. With a fast and efficient way to reduce costs associated with payment processing, we help improve the speed and profitability of our customers' businesses.\nPayCargo's platform connects payers and vendors across the cargo and logistics ecosystem, supporting payments, remittance data, integrations, vendor release workflows, and customer-facing digital experiences.\nAbout the Role:\nThe Senior Engineer, Cloud Security is responsible for strengthening and operating PayCargo's security controls across a modernizing platform that spans legacy systems, a multi-account AWS environment, Microsoft Entra ID, GitHub/ZenHub workflows, GitHub Actions pipelines, and a growing set of secure AI platform requirements. This is a senior, hands-on engineering role - not an entry-level or SOC-analyst position - focused on implementing and operating security controls, not only monitoring them.\nThis is a hands-on individual contributor role on PayCargo's DevSecOps team. The Senior Engineer - Cloud Security continuously monitors the perimeter, hardens cloud and endpoint controls, runs access reviews, supports audits, and leads incident response, turning security obligations into repeatable operational controls rather than one-time checklist items. The role requires strong judgment, strong follow-through, and the ability to reduce reactive fire drills while raising overall control maturity.\nThe Senior Engineer, Cloud Security partners closely with DevOps, Engineering, Architecture, Product, Compliance, Support, and executive stakeholders to keep PayCargo's global payments platform secure, available, and audit-ready.\nThis position has no direct reports. The role leads indirectly by setting and enforcing security standards, guiding engineers and DevOps toward secure patterns, and reducing single points of failure across the security function.\nAs the Senior Engineer, Cloud Security, you will:\nSecurity Operations & Monitoring\nMonitor the perimeter, cloud, and endpoint environments for threats, misconfigurations, and anomalous activity across AWS and Microsoft Entra ID\nOperate and tune security tooling, including CrowdStrike, Microsoft Defender, and CloudWatch and SNS logging and alerting\nTriage security alerts, drive incident response, and lead root cause analysis with clear, durable follow-up\nMaintain and improve on-call and escalation workflows (e.g., PagerDuty) so security events are handled consistently\nIdentity, Access & Control Maturity\nRun periodic access reviews and enforce least privilege across AWS IAM and IAM Identity Center, Microsoft Entra ID, and SaaS platforms\nStrengthen RBAC/ABAC, MFA, and SSO, SAML2, and OAuth2/OIDC patterns across internal and customer-facing systems\nReduce standing access and broad repository or local admin privileges in favor of bounded, auditable access\nOperate the federated access model, including SAML-based assumed access to AWS (via CommonFate Granted) and GitHub OIDC for pipelines, so people and CI receive least-privilege, time-bound access without static credentials\nOperate the PKI, including AWS Private CA and ACM, certificate issuance and rotation, CRLs, and mTLS trust stores on load balancers\nAdminister Entra ID groups and the Tailscale ACLs that gate network access\nGovern dependency and supply-chain risk using Dependabot and approved-package practices, and keep secrets in AWS Secrets Manager and SSM Parameter Store\nCompliance & Audit Evidence\nSupport SOC 1 Type 2, SOC 2, and PCI DSS obligations by owning the implementation of controls and the evidence behind them\nCoordinate penetration testing, remediation tracking, and verification of fixes\nProduce clean, repeatable audit evidence and reduce last-minute audit scrambles\nTranslate compliance requirements into operational controls engineers can follow without constant guidance\nSecure AI Platform Support\nHelp enforce containment for AI and model usage, including stateless model access, whitelisted egress, and approved destinations\nSupport tokenization and PII-protection patterns so sensitive data is not exposed to model providers\nReview AI-assisted workflows and applications for security boundaries, logging, and blast-radius reduction\nCross-Functional Partnership\nPartner with DevOps and Engineering to embed security into the Terraform and GitHub Actions pipelines, environments, and deployment paths\nWork with Compliance on audits and frameworks (SOC, PCI, ISO 27001) and on auditor-facing reporting\nAdvise Product and Architecture on secure-by-design patterns and practical trade-offs\nImplement and operate the security controls, boundaries, and egress rules defined in the platform architecture owned by the Director of Cloud & AI Platform Architecture\nProvide clear status, escalate risks early, and document controls, runbooks, and decisions\nRequired Qualifications:\n5+ years of hands-on security engineering, cloud security, or security operations experience preferred\nStrong working knowledge of AWS security and identity services, plus an enterprise identity provider such as Microsoft Entra ID or Okta\nHands-on experience with endpoint and threat tooling such as CrowdStrike and Microsoft Defender\nPractical experience with SOC and/or PCI DSS controls, audits, and evidence\nStrong understanding of IAM, RBAC/ABAC, MFA, SSO, SAML2, OAuth2/OIDC, JWT, including common failure modes, and least-privilege design\nHands-on experience with PKI and certificates, including a certificate authority such as AWS Private CA, TLS and mTLS, and certificate issuance, rotation, and revocation\nExperience with incident response, logging and alerting, and root cause analysis\nAbility to convert security and compliance requirements into repeatable operational controls\nStrong communication and documentation skills, and the ability to influence without direct authority\nExperience and Education:\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent practical experience\n5+ years of hands-on security engineering, cloud security, or security operations experience preferred\nDemonstrated experience operating production security controls in cloud environments\nExperience supporting SOC, PCI, or comparable audits and frameworks\nPayments, fintech, SaaS, or logistics experience is a plus\nPreferred Qualifications:\nSecurity certifications such as CISSP, CISM, CCSP, or equivalent\nExperience coordinating penetration testing and managing remediation\nFamiliarity with secure AI/LLM patterns, data tokenization, and egress control\nExperience securing CI/CD pipelines (GitHub Actions), GitHub/ZenHub, and Terraform-based infrastructure-as-code\nExperience with zero-trust network access such as Tailscale or Zscaler, and SSO brokers such as CommonFate Granted\nExperience in payments, fintech, SaaS, or other regulated, high-volume environments\nFamiliarity with ISO 27001 and SaaS security posture management\nYou Will Likely Succeed If:\nHave a winning attitude\nAre naturally curious with an always-learning mentality\nTreat security as an enabler, not only a gatekeeper\nLove to solve difficult problems\nAre assertive, confident, but also humble\nSpeak with clarity and listen with intention\nAre disciplined with your processes, documentation, and follow-up\nCan own a problem end to end without constant direction\nTake ownership of both the security outcome and the business result\nWhat Success Looks Like:\nSecurity controls are operational, monitored, and repeatable rather than reactive\nAccess is least-privilege, reviewed, and auditable across cloud and SaaS\nAudits and penetration tests are supported with clean evidence and timely remediation\nIncidents are handled with clear response, root cause analysis, and durable fixes\nAI and platform initiatives ship with security boundaries built in from the start\nThe Senior Engineer - Cloud Security becomes a trusted owner of one or more critical security domains within 90 to 180 days\nWhat We Offer:\nOur compensation package includes a competitive salary and bonus plan.\nWe care about your wellbeing and personal life. We offer vacation, sick, personal time off policies, a generous 401K match, and strong healthcare benefits.\nYour success at PayCargo is determined by the impact that you are making, and how well you collaborate with the various teams that you interact with. Everyone at PayCargo is empowered to take ownership to learn, self-improve, and master their skills in an environment focused on efficiency, collaboration, and purpose.\nWe are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity employer.","description_format":"text","description_chars":8990,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Transportation & Logistics","Sea Freight","Logistics"],"lifecycle":[{"event":"open","at":"2026-10-26T18:41:08Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":1,"median_offered_wage_usd":115000,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":28,"reasons":["seen:3","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/paycargo-senior-engineer-cloud-security","json_url":"https://alion.io/job/paycargo-senior-engineer-cloud-security.json","meta":{"generated_at":"2026-10-30T12:47:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18369,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2202032},"rest":"https://alion.io/mcp/rest/get_company?id=2202032"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpaycargo-senior-engineer-cloud-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpaycargo-senior-engineer-cloud-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpaycargo-senior-engineer-cloud-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/paycargo-senior-engineer-cloud-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpaycargo-senior-engineer-cloud-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3286767}},{"tool":"search_jobs","arguments":{"company":"paycargo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3286767},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}