Greenbox Capital
Greenbox Capital
Greenbox Capital is a technology-driven alternative lender and direct funder serving small businesses through merchant cash advances, invoice factoring, and short-term business loans. Founded in 2012, the company develops funding solutions designed to improve access to working capital, with its enterprise platform, The Box, supporting deal security, faster funding, and stronger underwriting. Greenbox Capital focuses on serving businesses in the United States, Puerto Rico, and Canada, guided by values of commitment, communication, teamwork, service, and integrity.

Senior Cloud Platform Security Engineer — Greenbox Capital (U.S. Remote)

Lead Azure platform security and cloud infrastructure protection at Greenbox Capital, supporting reliable, compliant, and cost-efficient services for small-business funding.

Description

  • Lead the ongoing improvement of Greenbox Capital’s Azure platform
  • Architect, configure, operate, and maintain Azure subscriptions, management groups, networking, compute, storage, platform services, and shared infrastructure
  • Define standards for environment separation, naming, tagging, approved services, secure configurations, and change control
  • Design and administer Microsoft Entra ID, MFA, Conditional Access, PIM, RBAC, managed identities, access reviews, and emergency-access processes
  • Enforce least-privilege access and separation of duties across cloud, SaaS, administrative, and non-human identities
  • Manage network segmentation, private connectivity, firewalls, DNS security, secure ingress and egress, and secrets management
  • Run cloud security posture management, vulnerability remediation, configuration monitoring, logging, detection, and threat-response functions
  • Create security alerts and dashboards while coordinating containment, recovery, evidence preservation, and corrective actions during incidents
  • Build and maintain infrastructure with Terraform, Bicep, or comparable infrastructure-as-code tools
  • Create reusable modules and oversee peer review, automated testing, deployment controls, and configuration-drift management
  • Convert GLBA Safeguards Rule, SOC 2, NIST Cybersecurity Framework, customer commitments, and internal policies into technical controls
  • Maintain audit evidence, support audits and customer security reviews, and remediate control gaps
  • Partner with Data & AI leadership on governance controls for discovery, classification, lineage, retention, DLP, access, and approved AI services
  • Secure AI and agent-based workloads through data boundaries, privileged-action controls, logging, monitoring, human approval, and incident response
  • Manage cloud budgets, alerts, tagging standards, forecasting inputs, and recurring optimization recommendations
  • Assess Azure-native and third-party capabilities for effectiveness, effort, maintenance, licensing cost, and architectural fit
  • Maintain at least 99.9% availability for critical platform services within operational control
  • Support Sev-1 and Sev-2 response expectations and test disaster recovery at least twice each year
  • Move at least 95% of production infrastructure toward infrastructure-as-code management
  • Maintain at least 98% resource-tagging compliance and improve cost visibility

Requirements

  • At least seven years of hands-on experience in cloud infrastructure or security engineering
  • Experience owning production Azure environments with demonstrated senior-level accountability
  • Strong knowledge of Azure subscriptions, management groups, networking, Microsoft Entra ID, RBAC, Azure Policy, monitoring, backup and recovery, security controls, and cost management
  • Hands-on infrastructure-as-code experience with Terraform, Bicep, ARM templates, or comparable tools
  • Experience with source control and automated deployment practices
  • Background in cloud security operations, vulnerability remediation, logging and detection, incident response, access governance, and disaster-recovery testing
  • Working knowledge of Microsoft Purview or a comparable data-governance platform
  • Ability to turn control requirements into technical designs, operating procedures, evidence, and measurable outcomes
  • Strong documentation skills covering runbooks, architecture diagrams, standards, risk statements, and executive updates
  • Ability to collaborate with internal teams, auditors, managed-service providers, and technology vendors
  • Financial-services or other regulated-environment experience with SOC 2, NIST Cybersecurity Framework, or similar frameworks is preferred
  • Production experience securing AI, machine-learning, large-language-model, or agent-based workloads is preferred
  • Relevant Microsoft certifications are preferred, including Azure Security Engineer Associate, Cybersecurity Architect Expert, Security Operations Analyst Associate, or Azure Solutions Architect Expert
  • Sound judgment, independent risk-based decision-making, clear communication, organization, adaptability, and a growth mindset

Benefits

  • Competitive compensation
  • Flexible paid time off
  • Fully remote work within the United States
  • Flexible scheduling aligned with Eastern Time hours
  • Health, dental, and vision insurance through a full benefits package

Related Jobs

Martin & Company

Director of P&C Insurance Consulting

Martin & Company
51 – 200 Employees
ConsultingInsuranceLogistics

Lead client-facing property and casualty insurance consulting engagements at Martin & Company, a technology-enabled insurance advisory firm. Shape project scope, protect delivery quality, grow client accounts, and mentor consultants.

Open
Powered by Search

Head of Growth, Canada (Remote)

Powered by Search
11 – 50 Employees
B2BMarketingSaaS

Lead SEO, generative engine optimization, paid acquisition, and brand advocacy at a B2B demand-generation agency. Build pipeline with AI agent workflows, content, webinars, podcasts, and industry events.

Open