DevOps Lead (FedRAMP)

Role overview

A global cloud security company is hiring a DevOps Lead to own its FedRAMP environment end to end, including the infrastructure, the authorization, and the relationships with federal agencies and assessors. The role combines senior individual contribution with leadership of a small U.S.-based team and treats FedRAMP 20x as an automation challenge rather than a paperwork exercise. It is a remote position based on the East Coast with overlap expected with an Israel-based R&D organization.

Responsibilities

- Build and evolve the FedRAMP environment across AWS GovCloud, AWS commercial regions, Azure Government, Azure Commercial, and GCP, including EKS, Terraform, Helm, CI/CD, FIPS-validated endpoints, hardened images, secrets management, and centralized logging. - Write infrastructure-as-code directly and set the engineering standards for how it is produced. - Design automation for continuous configuration validation, drift detection, evidence collection, and inventory accuracy so compliance is a byproduct of how the system runs. - Run continuous monitoring end to end, including scanning, POA&M management, asset inventory, and reporting. - Lead annual assessments and 3PAO engagements, from scoping through evidence delivery to closing findings, and serve as the primary interface to the FedRAMP PMO, agency sponsors, and assessors. - Own production health, monitoring, and incident response for the federal environment. - Represent the company in technical conversations with federal customers' security teams.

Requirements

- 8 or more years in DevOps, SRE, or cloud infrastructure with genuine production ownership. - Deep AWS experience, including hands-on work in AWS GovCloud and an understanding of how it differs from commercial regions. - Kubernetes in production: operating, debugging, and upgrading clusters. - 3 or more years of Terraform and infrastructure-as-code at scale. - Automation scripting in Python or a comparable language. - Strong working knowledge of NIST SP 800-53 Rev 5, including mapping controls to technical implementations. - Vulnerability management experience in a regulated environment. - Based in the United States and eligible for federal personnel screening; comfortable with meaningful overlap of Israel-based R&D hours. - Strong written and spoken English with the presence to represent a federal program to customer security teams.

Nice to have

- Experience with FedRAMP 20x, OSCAL tooling, or KSI-based validation. - Exposure to DoD IL4 or IL5, StateRAMP, CMMC, or IRAP. - Background growing a small infrastructure team. - Familiarity with compliance automation tools such as Xacta, Paramify, RegScale, or Vanta. - Experience at a security product company or with a cloud-native security platform. - Bachelor's degree in Computer Science or Computer Engineering, or equivalent hands-on experience.

Benefits and work setup

- Remote role based on the East Coast, with flexible hybrid options; U.S. holidays observed. - Annual salary range of $210,000-$230,000, plus equity. - Discounted medical, dental, and vision benefits with significant employer contribution, beginning on day one. - Generous paid time off, monthly cell phone and home internet reimbursement, work-from-home stipend in the first month, and a choice of Mac or Windows laptop.