About the roleAs a
Cloud, Deployments & DevSecOps Engineer, you'll join the team that secures the platform hardware and defense teams rely on to ingest, analyze, and act on their test and operations data. We deploy across AWS, AWS GovCloud, customer-hosted clouds, and on-premises environments, and you'll own the security controls, detection, and compliance evidence that make those deployments trustworthy for customers, including those with federal requirements. You'll work directly with engineering to build these controls into how we deploy and operate.
This role is ideal for someone who pairs deep AWS security experience with hands-on cloud engineering, and who would rather build guardrails and automation that engineers adopt than review from the sidelines. You'll shape which security problems we take on and in what order, with little oversight.
What you'll do- Design and implement security controls across AWS, AWS GovCloud, customer-hosted clouds and on-premises deployments.
- Develop secure cloud architecture, including landing zones, service control policies and security boundaries.
- Harden Kubernetes and EKS environments, including workload identity, network policies and runtime security.
- Build centralized logging, monitoring, dashboards and detection capabilities across deployments.
- Develop cloud detection and response workflows, triage cloud security findings and support incident response and recovery.
- Implement infrastructure-as-code guardrails, policy-as-code, drift detection and continuous compliance automation.
- Improve deployment pipeline security through artifact signing, admission policies and software supply chain controls.
- Develop container and base-image security standards, including images that meet applicable FIPS requirements.
- Partner with engineering to obtain and integrate available security telemetry from customer environments.
- Support FedRAMP and other federal deployment requirements through technical controls and evidence.
We're looking for someone with- Deep AWS security experience combined with hands-on cloud engineering and deployment experience.
- Strong Kubernetes experience, including securing clusters and workloads.
- Experience implementing cloud identity, access and network security controls.
- Experience building or operating cloud logging, monitoring and threat detection.
- Experience with infrastructure as code and security automation.
- Experience working directly with engineering teams to implement and maintain production security controls.
Skills that supercharge us- Certified Kubernetes Security Specialist (CKS).
- Experience with Azure, GCP, Oracle Cloud or self-hosted deployments.
- Experience supporting FedRAMP, AWS GovCloud or DoD IL4/IL5 environments.
- Experience with secure CI/CD, artifact signing, container security or software supply chain controls.
- Experience handling cloud security incidents or complex deployment failures.
Benefits/Perks- 100% coverage of medical, dental, and vision insurance
- Unlimited PTO and sick leave
- Free lunch, snacks, and coffee
- Professional Development Stipend
- In-office hardware lab with a $250 project stipend
- Annual company retreat
- 12 weeks parental leave
- Fertility and family planning ($15,000 lifetime)
- Wellness stipend ($100/month)
- $500/year hardware sensor stipend
- 401(k)
- Employee-friendly equity terms
- In-office 5 days per week
CompensationThe base pay range for this role is $208,000 - $245,000 per year.
