Senior IT Infrastructure Auditor

Job description

Scope of Role As a Senior IT Infrastructure Auditor, you will ensure the technical integrity, regulatory alignment, and operational resilience of Bamboo’s platforms that facilitate money movement and exchange of value. You will use your deep understanding of systems architecture, access governance, and compliance frameworks to analyze current networks, create more robust internal processes, proactively mitigate operational risks, and create a highly reliable, compliant environment. You will bring senior-level systems integrity expertise to the team, lead technical compliance specifications, participate in cross-functional syncs, and ensure safe, efficient scaling of our infrastructure. As a senior Individual Contributor, your role is central to anchoring the technical execution of critical risk-mitigation and compliance projects. You will act as a technical multiplier, taking on high-impact implementations and ensuring that technical delivery aligns with our data guidelines, strict regulatory mandates, and platform uptime goals. Note: Please do not apply if your expertise is within Microsoft products only. What you will be doing: Work with engineering teams, the Legal team, and the Compliance team across Bamboo on project definition, technical specification, and monitoring as we scale Bamboo’s internal systems and products. Architect, implement, and audit Identity and Access Management (IAM), endpoint management (MDM), and zero-trust architectures to protect the company’s data and customer assets. Drive proactive monitoring, capacity planning, and system integrity management to ensure a 99.9% system uptime across all core services, ensuring our technical compliance and access controls never break because of scale. Stay continuously up to date with industry trends, global reports on operational breaches, and emerging attack vectors, thoroughly analyzing these trends to architect preemptive mitigation and system-hardening strategies. Support incident response team efforts for internal anomalies or technical compliance breaches, executing rigorous root-cause analysis and post-mortems to continuously harden our infrastructure. Maintain and oversee compliance-driven tooling (such as SIEM platforms, network traffic analyzers, and access gateways), ensuring all internal configurations meet SOC 2, ISO 27001, and local data protection standards. Actively mentor junior and mid-level IT engineers through knowledge sharing, policy creation, and thorough process reviews, increasing the team's capabilities without taking on formal managerial tracking. Safely leverage AI tools within your daily compliance auditing and log-monitoring workflows to model faster anomaly detection practices for the broader IT team, ensuring all AI-assisted operations adhere strictly to Bamboo's data sovereignty and privacy standards. Ensure all technical operations meet regulatory requirements (GDPR, HIPAA, FinTech regulations) Conduct regular risk assessments and manage the Business Continuity and Disaster Recovery (BCDR) plans. Develop and enforce company-wide IT policies, including Access Control and Data Privacy standards. Oversee lifecycle management, inventory governance, and secure provisioning of IT assets while providing troubleshooting and remediation across endpoints, systems, and compliance tools. Who You Are You have 4+ years of experience in DevOps, technical compliance, systems engineering, and network administration in the fintech industry or on a scaling consumer product. Demonstrated mastery of corporate infrastructure tools, Identity Providers (e.g., Google Workspace, Okta), and endpoint management solutions (e.g., Jamf, Intune). Deep understanding of technical compliance frameworks (e.g., SOC 2, ISO 27001) and how to translate legal/regulatory requirements into strict infrastructure configurations. Proven experience with network integrity tools, anomaly detection, secure cloud environments (e.g., AWS, GCP), and executing technical risk assessments. Excellent communication and collaboration skills to partner closely with other stakeholders. A passion for clean, auditable systems and a relentless drive to optimize internal security posture without blocking engineering velocity. You are known for being a highly self-directed problem solver. You do not just focus on fixing access bugs, you also mitigate entire classes of systemic risk. You are a skilled communicator to both technical and non-technical audiences, and are known to articulate complex risk trade-offs clearly. You appreciate direct communication. You are both an active communicator and an eager listener. You appreciate candid feedback and see every setback as an opportunity to grow. You have a “can do” attitude. Owning a problem doesn’t scare you, but rather empowers you to take 100% responsibility for achieving the Bamboo mission. You are never tired of learning.