Corporate Security Engineer, IAC & Automation

OnePay is a consumer fintech company dedicated to improving financial services for millions of Americans. The Corporate Security Engineer will lead the design and implementation of corporate security infrastructure, enhance security controls, and drive automation to maintain a robust security posture in a rapidly scaling environment.

Responsibilities:

• Work with IaC tools like Terraform to ensure enterprise configurations are steady, change-managed and machine-readable
• Design and deploy endpoint security measures aligned with industry standards, including vulnerability management
• Ensure a strong security posture for corporate SaaS applications by configuring vendor capabilities or building automations to meet OnePay standards
• Mature and manage data protection controls, including Data Loss Prevention (DLP) tools and secure data handling processes
• Build secure methods for sharing data with internal teams and external partners
• Collaborate with IT, Infrastructure, and Security teams to implement security measures, maintain critical corporate systems (ensuring availability and compliance), and drive process improvement through automation
• Develop and run incident response and disaster recovery plans, including tabletop exercises

Requirements:

• 5+ years of IT experience, including 3+ years in enterprise security within cloud environments
• Expertise in IaC tools like Terraform (preferred), Puppet, Chef or Ansible
• Proven ability to lead projects, drive measurable security improvements through automation, leveraging scripting (Python, Go, and/or TypeScript)
• Solid understanding of networking, authentication standards, and security frameworks (MITRE ATT&CK, NIST CSF, CIS benchmarks), with hands-on experience in ZTNA and DLP solutions (e.g., Netskope, Zscaler)
• Skilled at simplifying technical concepts for non-technical audiences and influencing decisions
• Experience with workflow automation tools like n8n is a plus