Compliance Engineer
Core
Implementing compliance requirements and automating evidence collection for cloud infrastructure to support SOX, SOC2, and ISO-27001 audits.
Role type
Senior IC Compliance Engineer (DevOps/Cloud)
Builds
Automated compliance workflows and infrastructure guardrails for cloud-based legal tech solutions.
Domain
Legal technology / Cloud Infrastructure / Security Compliance
Deliverable
production ML models | infrastructure
Required skills
Technical compliance expertise, SOX 404, ISO-27001, SOC2, IT general controls (ITGC), DevOps, AWS, Infrastructure as Code, Python, Bash, Kubernetes (EKS), Terraform, CI/CD pipelines, Access management, Segregation of Duties (SoD)
Preferred skills
FedRAMP, NIST 800-53, PaaS management, Cloud Networking (VLAN, routing), Azure, GCP, Windows Server, ASP.NET Deployments
Technologies
AWS (EC2, Lambda, ECS, EKS, S3, CloudFormation), Terraform, Docker, Jenkins, GitHub, HashiCorp Consul, ELK Stack, OpenTelemetry, DataDog, Python, Bash, Kotlin
Responsibilities
Serve as technical contact for annual SOX, SOC2 Type II, and ISO-27001 audits; Implement Compliance as Code with automated guardrails; Manage user access lifecycle and enforce Segregation of Duties; Support GRC teams during sales cycles and RFPs.
Seniority
Senior, hands-on IC