DevOps Lead (FedRAMP)

Accountabilities:

• Own, operate, and continuously improve the federal cloud environment across AWS GovCloud, AWS commercial regions, Azure Government, Azure Commercial, and GCP.
• Design, implement, and maintain infrastructure using EKS, Terraform, Helm, CI/CD pipelines, hardened images, FIPS-validated endpoints, secrets management, and centralized logging.
• Write infrastructure code directly while establishing engineering standards and reusable patterns for the broader team.
• Build automation for continuous configuration validation, drift detection, evidence collection, inventory accuracy, and other compliance-related workflows.
• Determine how new platform capabilities are introduced into the federal environment and ensure they are implemented securely and cleanly.
• Own production health, monitoring, observability, availability, and incident response for the environment.
• Lead the FedRAMP continuous monitoring program, including vulnerability scanning, POA&M management, inventory, reporting, and ongoing compliance activities.
• Own authorization documentation and artifacts, including the System Security Plan, boundary diagrams, control implementations, and their transition to OSCAL-based processes.
• Assess changes to the authorization boundary, determine their impact, and manage associated notification and compliance requirements.
• Lead annual assessments and third-party assessment organization engagements from scope definition and evidence preparation through findings resolution.
• Serve as the primary technical interface with federal program stakeholders, agency sponsors, assessors, and other external parties.
• Represent the federal environment in technical discussions with agency security teams, contractors, and prospective customers.
• Partner with Sales, Sales Engineering, and Customer Success teams to provide credible technical guidance during security reviews, architecture discussions, and audit responses.
• Translate federal security and compliance requirements into practical, implementable engineering solutions for distributed R&D teams.
• Contribute to the development of a small U.S.-based infrastructure team while continuing to maintain significant hands-on engineering responsibility.
• Stay current with evolving FedRAMP requirements, cloud security practices, and emerging compliance automation approaches, and proactively communicate their implications.

Requirements:

• 5+ years of professional experience in DevOps, Site Reliability Engineering, cloud infrastructure, or a closely related discipline, with substantial production ownership.
• Demonstrated hands-on experience working within a FedRAMP-authorized environment and a practical understanding of authorization boundaries, significant changes, assessments, evidence, and 3PAO expectations.
• Deep AWS expertise, including hands-on experience with AWS GovCloud and a clear understanding of its differences from commercial AWS environments.
• Strong production Kubernetes experience, including operating, troubleshooting, securing, and upgrading Kubernetes clusters.
• 3+ years of hands-on Terraform and infrastructure-as-code experience at scale.
• Strong programming and automation capabilities in Python or an equivalent language, with an ability to replace manual processes with reliable automation.
• Fluency in NIST SP 800-53 Rev. 5 and the ability to translate security controls into concrete technical implementations.
• Experience with vulnerability management and security operations in regulated or compliance-driven environments.
• Experience with cloud infrastructure, CI/CD, configuration management, secrets management, logging, monitoring, and security automation.
• Strong understanding of production reliability, incident response, observability, and operational best practices.
• Excellent written and verbal communication skills, with the ability to explain complex technical and compliance topics to federal customers and security stakeholders.
• Strong customer-facing presence and the ability to build credibility during technical discussions, security reviews, audits, and architecture deep dives.
• Ability to work effectively with distributed international engineering teams and maintain meaningful working-hour overlap with teams based in Israel.
• Must be based in the United States and able to access authorized environments in accordance with applicable federal personnel screening requirements.
• Ability to operate autonomously, establish priorities, make sound technical decisions, and take full ownership of outcomes.
• Experience with FedRAMP 20x, OSCAL tooling, or Key Security Indicator-based validation is a strong advantage.
• Exposure to DoD IL4 or IL5, StateRAMP, CMMC, or IRAP is beneficial.
• Experience building or managing a small infrastructure team is a plus.
• Familiarity with compliance automation platforms such as Xacta, Paramify, RegScale, or Vanta is advantageous.
• Experience within a cybersecurity product company or cloud-native security environment is preferred.
• A bachelor's degree in Computer Science, Computer Engineering, or a related discipline is desirable, though equivalent hands-on experience may be considered.

Benefits:

• Annual salary range of $230,000–$260,000, based on experience, skills, and other relevant factors.
• Competitive equity package.
• Discounted medical, dental, and vision coverage with significant employer contributions.
• Benefits coverage beginning on the first day of employment.
• Generous paid time off and U.S. holidays.
• Flexible remote and hybrid work arrangements.
• Choice of Mac or Windows laptop.
• Work-from-home stipend during the first month of employment.
• Monthly reimbursement for home internet and cell phone expenses.
• Opportunity to work with talented colleagues across a global organization.
• Opportunity to take ownership of a strategically important federal cloud environment while remaining highly hands-on technically.
• Applications are accepted on an ongoing basis until the position is filled.