Info Security Systems Engineering

Systems & Security Engineer Reports to: Chief Technology Officer | Location: Remote (Residents in ID, NE, GA, OH, TX, TN, PA, MI, FL Only) | Type: Salary Exempt AvatarFleet helps transportation companies recruit, qualify, and stay compliant with the drivers who keep their fleets moving. Our platform, anchored by DriverHub, combines an applicant tracking system, DOT-compliant driver qualification files, and ongoing compliance monitoring into a single source of truth. We serve carriers across trucking, motorcoach, transit, and last-mile delivery who depend on us to keep their drivers road-ready and audit-ready. The Systems & Security Engineer owns day-to-day security administration and infrastructure operations, working closely with the CTO and software engineering team. The remaining time focuses on systems administration, production reliability, and support for engineering delivery. These responsibilities overlap throughout the workday. Our infrastructure runs on AWS and is EC2 heavy. Strong Linux administration and experience maintaining production applications on Linux hosts are essential. You will also support ECS and services such as WAF, ALB, S3, and EFS, and partner with software engineers on CI/CD. Application uptime directly affects our customers and is a core responsibility of this role. Maintain patched and hardened systems, effective monitoring, tested backups, documented controls, and dependable deployment processes so customers can rely on our applications and engineers can deliver changes with confidence. Own day-to-day security administration and coordinate SOC 2 Type II control execution, evidence collection, and annual audit preparation with the CTO and other control owners. Maintain security policies and operating procedures that reflect actual practices; Administer access controls and support access reviews, least privilege, credential management, and security logging. prioritize findings by severity, exposure, business risk, and customer impact. Own routine and urgent patching of Linux hosts, application dependencies, container images, and supporting software in partnership with engineering. Apply and document mitigations when an immediate patch is not practical. AWS Infrastructure Administration Deploy, configure, and maintain AWS resources, including EC2, ECS, WAF, ALB, S3, EFS, IAM, and networking components. Maintain secure configurations, appropriate capacity, reliable connectivity, and effective monitoring across production and supporting environments. Manage backups, replication, retention, restore testing, and secure data disposal in line with operational and compliance requirements. Improve performance and cost efficiency while protecting application availability. Linux Systems Administration Administer Debian and Amazon Linux hosts, including services, packages, permissions, storage, networking, and system configuration. Maintain production applications on EC2 hosts and troubleshoot issues across the operating system, application runtime, containers, network, and storage. keep configurations consistent and operating procedures documented. Monitoring, Incident Response & Reliability Maintain actionable infrastructure and security monitoring, log collection, and alerting; Restore service promptly, communicate impact and progress, and coordinate with engineering during production incidents. Investigate root causes, document incidents, and implement improvements that reduce recurrence. Engineering & CI/CD Support Support software engineering with CI/CD configuration, deployment environments, build and release troubleshooting, and secure pipeline access. Help maintain dependable deployments, configuration and secrets management, rollback procedures, and environment consistency. Partner with engineers to diagnose infrastructure and runtime issues affecting development, testing, and production. Use Terraform, Ansible, AWS CLI, and scripting to automate provisioning, configuration, patching, and recurring operational tasks. This role owns infrastructure operations, security administration, patching and mitigation, and the operational work supporting SOC 2 Type II compliance. Software engineering owns application features and application code. This role supports delivery through automation, infrastructure configuration, CI/CD, and production troubleshooting. Work closely with engineering, technical support, and leadership to resolve issues and prioritize work by security risk, availability, and customer impact. You are a hands-on systems and security operator who is comfortable moving between audit evidence, vulnerability remediation, Linux troubleshooting, AWS administration, and deployment support. You follow through on routine maintenance as carefully as urgent incidents, keep clear records, and understand that security controls and production reliability require consistent attention. Relevant backgrounds include systems administration, infrastructure engineering, cloud operations, DevOps, and security engineering with substantial Linux and AWS operating experience. At least 5 years of hands-on Linux systems administration, with responsibility for security and availability in production environments; Strong AWS administration skills, especially EC2 and Linux-hosted applications, with working experience across ECS, IAM, networking, load balancing, storage, WAF, and monitoring. Practical experience supporting SOC 2 Type II audits and maintaining controls throughout the audit period, including evidence collection, access reviews, and remediation tracking. Hands-on vulnerability management, Linux patching, security hardening, log analysis, and incident response. Experience with Terraform, Ansible, AWS CLI, shell scripting, Docker, and Docker Compose. Experience supporting CI/CD pipelines and troubleshooting deployment failures in collaboration with software engineers. Ability to troubleshoot across Linux, AWS, networking, containers, databases, storage, and application runtimes. Clear written communication, disciplined documentation, and sound prioritization based on risk, customer impact, and urgency. PostgreSQL and Redis administration, backup and recovery, and performance troubleshooting. Python scripting, GitHub workflows, and familiarity with Flask, JavaScript, Vue, Jira, and Sentry. Experience improving operational monitoring, disaster recovery, and infrastructure cost efficiency. Customer Empathy. Understand how reliability and security affect our customers and their daily work. Handle sensitive information carefully and report risks, gaps, and mistakes honestly. Fully remote. Use video conferencing and online collaboration tools regularly; Work closely with the CTO, developers, and technical support in a small, collaborative team. Provide flexibility for production incidents, urgent security updates, maintenance windows, critical releases, and audit deadlines, including occasional work outside core business hours. Follow company policies for information security, confidentiality, and acceptable use of company systems. We celebrate diversity and are committed to creating an inclusive environment for all employees.