Systems & Security Engineer

Systems & Security Engineer

Reports to: Chief Technology Officer | Location: Remote (Residents in ID, NE, GA, OH, TX, TN, PA, MI, FL Only) | Type: Salary Exempt

About AvatarFleet

AvatarFleet helps transportation companies recruit, qualify, and stay compliant with the drivers who keep their fleets moving. Our platform, anchored by DriverHub, combines an applicant tracking system, DOT-compliant driver qualification files, and ongoing compliance monitoring into a single source of truth. We serve carriers across trucking, motorcoach, transit, and last-mile delivery who depend on us to keep their drivers road-ready and audit-ready.

About the Role

The Systems & Security Engineer owns day-to-day security administration and infrastructure operations, working closely with the CTO and software engineering team. Approximately half of the role focuses on security administration, including vulnerability management, patching, mitigation, and SOC 2 Type II compliance. The remaining time focuses on systems administration, production reliability, and support for engineering delivery. These responsibilities overlap throughout the workday.

We maintain SOC 2 Type II audited compliance. Continuous readiness for our annual audit, with the goal of no exceptions, is a top priority. This requires controls that operate consistently throughout the year, timely remediation, and clear evidence of the work performed.

Our infrastructure runs on AWS and is EC2 heavy. Strong Linux administration and experience maintaining production applications on Linux hosts are essential. You will also support ECS and services such as WAF, ALB, S3, and EFS, and partner with software engineers on CI/CD. Application uptime directly affects our customers and is a core responsibility of this role.

The objective: keep AvatarFleet's SaaS infrastructure secure, reliable, and continuously audit ready. Maintain patched and hardened systems, effective monitoring, tested backups, documented controls, and dependable deployment processes so customers can rely on our applications and engineers can deliver changes with confidence.

What You'll Do

Security Administration & Compliance

• Own day-to-day security administration and coordinate SOC 2 Type II control execution, evidence collection, and annual audit preparation with the CTO and other control owners.
• Maintain a year-round control calendar; track recurring reviews, evidence requirements, remediation commitments, and audit requests through completion.
• Maintain security policies and operating procedures that reflect actual practices; identify control gaps early and drive corrective action.
• Administer access controls and support access reviews, least privilege, credential management, and security logging. Keep records complete and readily available for audit.