Sr. DeveOps Engineer

The Sr DevOps Engineer (FedRAMP) is responsible for developing and maintaining the company’s enterprise-grade infrastructure on the cloud. They work closely with the development team and all the other stakeholders to set up new infrastructure and tools. With their exceptional knowledge, they optimize the CI/CD workflow, monitor and enhance the production performance. They are the first responders to production outages and security incidents.

Responsibilities

1. Work on routine DevOps tasks assigned, such as: infrastructure development, performance optimization, application release, real-time monitoring, and incident response.
2. Ensure all aspects of infrastructure are documented properly to meet FedRAMP standards. Produce clear, concise, and standard compliant documentation and reports.
3. Own partnership with cross-functional teams to address FedRAMP system design, development, testing, and security concerns at an early stage during the whole SDLC cycle.
4. Work closely with the security team to continuously improve the infrastructure security. Implement compliance controls; support security assessments; plan and perform BCP/DRP drills regularly.
5. Deliver highly secure and efficient solutions within comprehensive compliance regulations (including FedRAMP, ISO27001, SOC2, HIPAA, PCI, etc.)
6. First responder to FedRAMP production outages and security incidents. (May require 7x24 standby)

Requirements

1. Due to security screening requirements, candidates must be a US Citizen or green card holder.
2. Degree in Computer Science or related field. Masters degree preferred.
3. Minimum 3 to 5 years proven experience as a DevOps Engineer, preferably with experience maintaining infrastructure within FedRAMP regulated environments.
4. Familiarity implementing Federal Information Processing Standards (FIPS) Cryptographic modules.
5. Deep understanding of Agile processes, and SaaS/PaaS cloud architectures. AWS experience is required.
6. Solid understanding of containerization technologies such as Docker and container orchestration platforms like Kubernetes.
7. Experience with IaC tools like Terraform, Ansible.
8. Familiarity with CI/CD concepts and tools such as Jenkins, GitHub Action or Gitlab CI/CD.
9. Experience setting up real-time monitoring solutions to detect downtime as well as negatively-impacting conditions (such as New Relic, Datadog, Grafana, ELK, etc.).
10. Experience in programming languages (one or more of: NodeJS, Python, Golang, Shell).
11. Preferred experience supporting the following Datastore/Databases: MySQL, PostgreSQL, Redis, MangoDB.
12. Experience with cloud hosting, both as a self-hosted without a cloud infrastructure (such as GCP, AWS, Azure), as well as via 3rd party hosts (such as Wix, Squarespace, WP Engine).
13. Experience with caching and edge-server environments (such as Cloudflare, Cloudfront, S3, and Akamai).
14. Experience developing plans for auditing and testing of those environments and the hosted tech stacks on those platforms. This includes secure CI/CD pipelines, backups of CMS-managed changes, and penetration testing (both done internally as well as via 3rd-party services).
15. Proven communication and leadership skills. Able to work with remote teams located in different time zones.