Lead Security & Infrastructure Engineer

What you'll do - Own identity and access end to end, with least-privilege administration, phishing-resistant authentication, and SSO across our core applications. - Set the security and management standards for our macOS and Windows endpoint fleet (encryption, patch posture, device compliance, remote lock/wipe) while relying on our MSP for routine execution. - Own and scale security operations, from monitoring, detection, alerting, and response coordination to post-incident reporting and tabletop readiness, using MSP, MDR, or IR partners where they add leverage. - Own the secure operational backbone across corporate, lab, and cloud environments: integrations, data transfers, vendor-managed systems, backup, recovery, continuity, and reliable access. - Build internal tooling and automation for onboarding, access reviews, security reporting, and agent/LLM governance, including scoped credentials, sandboxed execution, and audit logging.

Requirements - Several years across security engineering, SRE, platform, or infrastructure, including time as an early or sole security and IT owner at a startup. - Fluency across core security and IT systems: identity providers, endpoint management, AWS security tooling, networking, collaboration tools, end-user computing, backups, and operational systems of record. - Proven ability to scale security operations with modular solutions, built in-house or managed through MSP, MDR, or technical vendor partners. - Experience supporting technical, scientific, or laboratory environments where vendor-managed systems, instruments, and uptime matter, and managing MSPs and vendors directly. - Demonstrated use of AI agents and automation to force-multiply your work, paired with a clear grasp of how to secure them. - A track record of right-sizing controls to company stage, with the judgment and presence to communicate clearly with scientists, operators, executives, vendors, auditors, and sponsors.

Nice to haves - Experience supporting GxP, clinical, or other regulated environments, or hands-on readiness work for SOC 2, ISO 27001, or sponsor and clinical-trial audits. - Familiarity with data-integrity expectations such as audit trails and ALCOA+ for regulated data handoffs. - You program. You write real code to automate operations (and leverage LLMs to help).

Benefits - Health, dental, and vision insurance - 401(k) with company match - Industry-leading paid time off (PTO), 20 days/year for all employees plus holidays - Paid parental leave - Meals and snacks on-site Salary Range: $160,000 to $240,000.

Compensation for the role will depend on a number of factors, including a candidate's qualifications, skills, competencies, and experience. NewLimit offers a competitive benefits package, which includes a 401k, healthcare coverage, and 20 days of PTO. Learn more at: https://www.newlimit.com/careers *This compensation and benefits information is based on Company's good faith estimate as of the date of publication and may be modified in the future.