Information Technology Operations Engineer

About PDQ

With a recent $25 million Series A round from US-based based PeakSpan Capital, PDQ is scaling rapidly, already serving over 200 global customers. We’re building the future of checkout—blending machine learning, data intelligence, and automation to power the most advanced eCommerce experiences in the world.

Each of us takes ownership over our domains while fostering tight collaborations and low ego. With a merchant-first approach, and driven by speed and innovation, we work hard to unlock lasting optimizations for independent brands fighting razor-thin margins.

Job Overview:

We are looking for a Cloud Security & IT Operations Engineer to lead and enhance PDQ’s security posture while ensuring seamless IT and SaaS operations. This role is security-first, with a focus on cloud security, compliance, vulnerability management, and penetration testing, while also owning the selection, governance, and lifecycle management of our SaaS applications.

As a key member of our team, you will be responsible for securing our cloud infrastructure, ensuring compliance (SOC 2), deploying and managing SSO, managing penetration testing, handling SAST tooling, and driving vulnerability management processes. In addition, you will evaluate, select, negotiate, and onboard SaaS applications, ensuring they meet security and operational requirements while maximizing efficiency across the company. You will also collaborate with engineering teams to prioritize security issues, enforce secure coding practices, and ensure all security policies are in place for safe software development.

Beyond security, this role plays a strategic IT function, ensuring proper SaaS governance, policy enforcement, user training, and cross-functional alignment with Finance, HR, and Operations.

This is an exciting opportunity for someone who wants to own both security and SaaS strategy at a high-growth startup, proactively implement best practices, and work at the intersection of DevSecOps, IT governance, and SaaS management.

Responsibilities:

Cloud Security & Compliance:

• Own and enhance PDQ’s cloud security posture, ensuring AWS infrastructure is protected against evolving threats.
• Drive SOC 2 compliance efforts, managing security controls, audits, and documentation.
• Deploy and maintain SSO (Single Sign-On) solutions, ensuring secure authentication across all company tools.
• Implement and manage SAST (Static Application Security Testing) tools, review findings, and drive remediation processes.
• Own and manage penetration testing to proactively identify and mitigate vulnerabilities in our infrastructure and applications.
• Monitor and manage vulnerability scanning tools, track all known security risks, and collaborate with engineering teams to prioritize and remediate issues.

SaaS Governance & Management:

• Evaluate, select, negotiate, and acquire SaaS applications that align with business needs and security policies.
• Own the onboarding, configuration, and management of SaaS applications across the company.
• Maintain SaaS governance policies, ensuring security, compliance, and efficient license management.
• Partner with Finance, HR, and Operations to align SaaS procurement with company goals and optimize costs.
• Develop training programs and educate employees on SaaS tools, best practices, and security measures.

Security Operations & IT Governance:

• Develop and enforce security policies to ensure secure software development practices.
• Define and implement Identity & Access Management (IAM) best practices across cloud environments and internal tools.
• Automate security and IT workflows to improve efficiency and reduce risk.
• Ensure endpoint security across all employee devices using MDM (Mobile Device Management) and EDR (Endpoint Detection & Response) tools.
• Oversee and govern SaaS platforms and permissions, ensuring the right access levels for all employees.

IT Operations & Support:

• Manage and procure IT equipment for new employees, ensuring smooth onboarding.
• Maintain internal IT infrastructure, optimizing configurations for security and efficiency.
• Work cross-functionally with engineering, DevOps, Finance, HR, and leadership to align security initiatives with company goals.

Qualifications:

• 3-5+ years of experience in cloud security, IT security operations, or SaaS management.
• Strong knowledge of AWS security best practices, IAM policies, and cloud-native security solutions.
• Hands-on experience deploying and managing SSO solutions (e.g., Okta, Google Workspace, Azure AD).
• Experience with SOC 2 compliance, security control implementation, and audits.
• Familiarity with SAST tools (e.g., SonarQube, Snyk) and the ability to analyze and prioritize vulnerabilities.
• Experience conducting penetration testing and securing cloud environments against threats.
• Proven experience managing SaaS applications, including vendor evaluation, negotiation, acquisition, and governance.
• Ability to train employees on SaaS tools and drive company-wide adoption of security policies.
• Strong understanding of CI/CD security and integrating security tooling into DevOps workflows.
• Knowledge of IT security operations, including MDM (Jamf, Intune) and EDR solutions (CrowdStrike, SentinelOne, etc.).
• Experience managing known vulnerabilities, tracking CVEs, and collaborating with teams to ensure fixes are prioritized and applied.

Advantages:

• Automation skills (Python, Bash, Terraform) for security and IT workflows are a plus.
• Experience in a SaaS startup or high-growth tech environment.
• Hands-on experience with Zero Trust security models.
• Knowledge of container security best practices (Kubernetes, Docker, AWS, etc.).
• Familiarity with security incident response and forensics

Why Join PDQ?

At PDQ, we're reshaping the future of eCommerce with creativity, innovation, and cutting-edge technology. Join a passionate team dedicated to solving complex challenges in a fast-paced, hyper-growth environment, where your ideas and skills can make an immediate impact!