Nametag

• Design, build, and maintain scalable, cost-effective cloud infrastructure across AWS and Fly.io. • Own deployment strategy and service design across our monolith and microservices, including schema migrations and rollout safety. • Manage infrastructure-as-code (Cloudformation, Terraform or equivalent) for reproducible, auditable infrastructure. • Identify reliability risks, performance bottlenecks, and security gaps — and address them proactively. • Evolve our observability stack — logging, distributed tracing, metrics, and uptime monitoring. • Evolve on-call practices and incident response processes that keep us ahead of customer-impacting issues. • Champion a culture of reliability: postmortems, runbooks, and continuous improvement after incidents. • Manage and improve our CI/CD pipelines (GitHub Actions) and establish deployment best practices. • Build internal platform tooling and abstractions that reduce toil and increase engineering velocity. • Partner with product engineers to make infrastructure easy to use correctly and hard to use incorrectly. • Design and operate data pipelines that support our ML-powered verification systems. • Evolve our MLOps infrastructure so models can be trained, evaluated, and deployed safely and repeatedly. • Work closely with engineering and product leadership on technical roadmap decisions. • Review code, mentor peers, and help raise the bar on security, reliability, and operational discipline. • Communicate infrastructure tradeoffs clearly across technical and non-technical stakeholders.

Nametag is building the future of secure digital identity. Our mission is to make it easy for people and organizations to prove who they are online - safely and seamlessly. We’re pioneering next-generation identity verification and account protection so that users can control their own identity, and companies can build trust without friction. About the Role Nametag is seeking an experienced Senior GRC Analyst to own and evolve our security and compliance program. This role is ideal for someone who thrives in a fast-paced startup environment, has deep experience with SOC 2 and other compliance frameworks, and is comfortable building and running programs with limited resources. You will report directly to the Head of Engineering and partner closely with the engineering team to ensure security is built into everything we do. As a Senior GRC Analyst, you will own the entire security and compliance function as an individual contributor, maintaining our existing certifications, driving new compliance initiatives, coordinating penetration tests, and building trust with customers and prospects. You will work closely with engineering, product, sales, and customer success to ensure security enables the business rather than blocking it. What You'll Do Compliance Program Management - Own and maintain SOC 2 Type II certification, including evidence collection, control monitoring, and audit coordination - Drive IAL3 compliance readiness and implementation - Manage accessibility compliance (WCAG) requirements - Identify and pursue additional certifications as needed based on customer and market requirements Security Operations - Coordinate penetration testing cycles and drive remediation with engineering - Maintain a living view of organizational risk and surface it to leadership - Develop and maintain security policies, procedures, and controls - Respond to security incidents with speed and clarity Customer Trust - Respond to customer security questionnaires promptly and accurately - Support sales in security-sensitive enterprise deals - Maintain public-facing trust documentation - Participate in customer security calls and reviews as needed Cross-Functional Partnership - Partner with engineering to build security into the development process - Provide clear security guidance and timely reviews so teams can ship with confidence - Collaborate with product on security and accessibility features - Work with customer success to address customer security concerns Ideal Qualifications We know that no candidate will perfectly match every requirement, and that's okay. If you're passionate about what we're building and have most of the skills below, we'd love to hear from you. - 5+ years of experience in security, compliance, or GRC, with demonstrated hands-on ownership of SOC 2 Type II programs - Experience building or running compliance programs in startup or resource-constrained environments - Strong understanding of how auditors think, ideally from auditor-side experience or running multiple audit cycles - Technical fluency to read pen test reports, understand cloud architecture, and have informed conversations with engineers - Knowledge of GRC tooling and vendors, with opinions on what's worth investing in at different company stages - Excellent communication skills, able to translate security topics for executives, salespeople, and customers - Experience with identity verification, authentication, or security-focused products is a strong plus - Familiarity with IAL2/IAL3 or NIST 800-63 identity proofing standards is a strong plus - CISSP, ISO 27001 Lead Auditor, or similar certifications are a plus but not required What We Value - Intellectual horsepower: quickly grasping complex technical and business concepts - Kindness and integrity: earning trust is central to how we build relationships with customers and colleagues - Bias for action: we move quickly to deliver impact and protect our customers against fast-moving threats Compensation The base salary range for this full-time position is $120,000-$160,000, plus equity and benefits. Nametag is a founding member of the Open Imperative, publicly committed to pay equity in the technology industry. We post positions with ranges to encourage people of different backgrounds and experiences to apply. Every offer is benchmarked against market data to ensure fairness and consistency. Final compensation is determined by role, level, and additional factors such as skills, experience, and education. Your recruiter or hiring manager can share more details during the hiring process. Culture & Perks At Nametag, we believe trust starts with how we treat each other. We are a remote-first team that values autonomy, inclusivity, and collaboration, with regular in-person time to stay connected and innovate together. - Remote-first: Work from anywhere in the US. Our team spans Seattle, San Francisco, Ann Arbor, Denver, New York City, and beyond - Quarterly off-sites: We bring the team together once per quarter for in-person collaboration, often off-site in new places - Flexible schedules: Work in your own time zone; we align key meetings across a shared window We Offer - Competitive salary - Meaningful equity ownership - Comprehensive health benefits (medical, dental, vision) - Flexible paid time off - Quarterly team off-sites and travel support - New computer hardware and equipment - An inclusive environment where your voice has impact and your work drives change

• Own and maintain SOC 2 Type II certification, including evidence collection, control monitoring, and audit coordination • Drive IAL3 compliance readiness and implementation • Manage accessibility compliance (WCAG) requirements • Identify and pursue additional certifications as needed based on customer and market requirements • Coordinate penetration testing cycles and drive remediation with engineering • Maintain a living view of organizational risk and surface it to leadership • Develop and maintain security policies, procedures, and controls • Respond to security incidents with speed and clarity • Respond to customer security questionnaires promptly and accurately • Support sales in security-sensitive enterprise deals • Maintain public-facing trust documentation • Participate in customer security calls and reviews as needed • Partner with engineering to build security into the development process • Provide clear security guidance and timely reviews so teams can ship with confidence • Collaborate with product on security and accessibility features • Work with customer success to address customer security concerns

• Develop and execute a scalable channel strategy to achieve revenue and market expansion goals. • Identify and onboard new partners - including resellers and distributors. • Define success metrics for partner performance and regularly report on results. • Drive joint business planning, co-selling strategies, and pipeline growth with key partners. • Build and maintain strong, trust-based relationships with partners to foster long-term success and partner retention. • Develop training, certification, and enablement programs to equip partners with the tools and knowledge they need. • Collaborate on co-marketing campaigns and events to increase visibility and lead generation. • Conduct regular partner business reviews to assess performance and identify new opportunities. • Identify opportunities for geographic or vertical market expansion through partnerships. • Stay informed on industry trends, competitor activity, and evolving market dynamics to refine channel strategy. • Work cross-functionally to align partner feedback with Nametag’s product roadmap and customer needs.

• Own and maintain SOC 2 Type II certification, including evidence collection, control monitoring, and audit coordination • Drive IAL3 compliance readiness and implementation • Manage accessibility compliance (WCAG) requirements • Identify and pursue additional certifications as needed based on customer and market requirements • Coordinate penetration testing cycles and drive remediation with engineering • Maintain a living view of organizational risk and surface it to leadership • Develop and maintain security policies, procedures, and controls • Respond to security incidents with speed and clarity • Respond to customer security questionnaires promptly and accurately • Support sales in security-sensitive enterprise deals • Maintain public-facing trust documentation • Participate in customer security calls and reviews as needed • Partner with engineering to build security into the development process • Provide clear security guidance and timely reviews so teams can ship with confidence • Collaborate with product on security and accessibility features • Work with customer success to address customer security concerns

• Act as the first technical responder for escalated customer issues, particularly those blocking integrations or deployments. • Debug in the wild - inspecting API payloads, webhook logs, OAuth exchanges, and race conditions that surface only under real-world load. • Provide interim solutions such as code snippets, pull requests, documentation updates, or configuration guidance. • Bridge the gap between customer and engineering: reproduce issues, isolate root causes, and ensure fixes are fully validated before release. • Gather structured context and relay actionable insights to engineering for long-term fixes. • Recommend integration best practices across authentication flows, REST APIs, and IAM platforms. • Improve internal support tooling, documentation, and runbooks based on recurring patterns. • Surface common pain points and influence product priorities.

• Partner closely with Account Executives to drive the technical validation for enterprise new business and expansion opportunities. • Lead deep technical discovery to understand customer identity architecture, security posture, and success criteria. • Own and execute enterprise-grade demos and proof-of-concept, clearly tied to documented success criteria reflecting customer requirements around relevant use cases, risk factors, and decision criteria. • Articulate Nametag’s value in the context of IAM, authentication flows, and account protection—not just product features. • Serve as the primary technical adviser during the sales cycle, building trust with security, IT, and identity stakeholders. • Define clear technical success criteria and acceptance standards for each deal. • Own the handover to post-sales, ensuring Solutions Engineering, Customer Success, and Technical Customer Engineering teams have full context. • Provide continuity and technical oversight during implementation to ensure onboarding stays aligned with what was sold and agreed. • Surface product gaps, competitive insights, and recurring objections to Product and Leadership. • Support renewals and expansions as necessary by re-engaging on architecture changes, new use cases, integration opportunities, and evolving security requirements.

• Develop and execute a territory plan focused on acquiring and growing large enterprise accounts. • Identify and qualify new business opportunities through research, prospecting, and networking. • Manage complex sales cycles, aligning multiple stakeholders and decision-makers. • Build and nurture trusted relationships with executives and decision-makers within large enterprises. • Serve as a strategic advisor, understanding customer needs and positioning Nametag’s solutions to address key challenges. • Partner with customer success teams to ensure smooth onboarding and long-term satisfaction. • Achieve or exceed quarterly and annual sales quotas through new customer acquisition and expansion within existing accounts. • Collaborate with internal teams to craft compelling proposals and deliver impactful presentations. • Negotiate contracts and close deals that drive mutual value for Nametag and the customer. • Maintain a deep understanding of Nametag’s products, services, and value proposition. • Stay informed about industry trends, competitor offerings, and market dynamics to tailor sales strategies. • Provide customer feedback to product and marketing teams to help refine solutions and messaging. • Partner with marketing, sales engineering, and product teams to create tailored solutions and drive demand generation. • Act as a mentor and resource for peers, sharing best practices and contributing to team success. • Participate in team meetings, pipeline reviews, and strategic planning sessions.

• Architect & Scale Core Systems: Design the next generation of Nametag’s identity verification and account protection platform. • Own architectural strategy for distributed, highly available systems that handle real-time authentication at scale. • Evaluate and integrate emerging technologies in cryptography, AI threat detection, and identity standards. • Define company-wide patterns for reliability, observability, and secure software delivery. • Technical Leadership & Mentorship: Lead major cross-functional technical initiatives that span multiple product lines and services. • Set and enforce high engineering standards for performance, security, and maintainability. • Partner with the CTO to translate technical vision into actionable roadmaps. • Mentor senior and mid-level engineers to grow technical depth across the team. • Innovation & Thought Leadership: Contribute to patents and open standards that advance identity security and authentication technology. • Represent Nametag in the broader technical community through conferences, panels, or publications. • Help shape how the world thinks about secure identity in an era of deepfakes and AI threats.

• Design, develop, and maintain scalable backend services and APIs • Manage database schema design, migrations, and performance optimization • Build and refine authentication, authorization, and data protection systems • Contribute to architecture decisions and the overall technical roadmap • Collaborate with design and product to build responsive, secure, and user-friendly web interfaces • Develop internal tools, dashboards, and supporting applications that improve developer and customer workflows • Ensure seamless integration between front-end and backend services • Partner with product, design, and DevOps to deliver impactful, customer-focused solutions • Review code, mentor peers, and help raise the technical bar across the team • Champion best practices in testing, deployment, and observability • Investigate and resolve complex technical challenges across the stack • Identify opportunities to improve performance, reliability, and developer experience • Stay current with emerging technologies and evaluate their potential impact on our architecture