DevSecOps Engineer: FedRAMP & GovCloud Security

Matrixspace; Burlington, Northern (MA, KY); Hybrid; USD 125,000 - 150,000; Full time

Job summary

MatrixSpace is seeking a hands-on DevSecOps Engineer to join our Release Engineering team. You’ll build secure AWS environments, automate deployments, and ensure compliance for government customers.

You’ll work across DevOps, security, and compliance to embed FedRAMP and NIST controls into architecture and pipelines, while partnering with engineers and assessors. This role offers opportunities to influence cloud platform reliability and security from inception through ongoing operations.

Qualifications

• 3-6 years of experience in security engineering, cloud security, DevSecOps, infrastructure security, or a related field.
• Hands-on AWS experience, including networking, Linux, IAM, encryption, logging, vulnerability management, and security monitoring.
• Experience with security frameworks such as FedRAMP, NIST 800-53, NIST 800-171, CMMC, RMF, or similar standards.
• Experience translating security and compliance requirements into practical technical controls with engineering teams.
• Hands-on experience with DevOps practices, Infrastructure as Code, source control, CI/CD pipelines, and automated deployment workflows.
• Knowledge of system hardening vulnerability remediation, secure configurations, and security control lifecycle management.
• Strong problem-solving, communication, and cross-functional collaboration skills.

Responsibilities

• Build, operate, and secure AWS environments against security baselines, FedRAMP requirements, and other applicable standards.
• Partner with Software Engineering and AI teams to incorporate security and compliance into system architecture, CI/CD, deployment, and operations.
• Support FedRAMP authorization and continuous monitoring activities, including evidence collection, POA&Ms, and remediation tracking.
• Perform security architecture reviews, risk and gap assessments, vulnerability management, and DISA STIGs.
• Implement security controls across networking, Linux systems, IAM, encryption, logging, and security monitoring.
• Build and maintain Infrastructure as Code, CI/CD, deployment, and release automation using Terraform, Pulumi, and Python.
• Maintain security documentation, system diagrams, asset inventories, and control implementation details.
• Work with engineering teams, external assessors, compliance partners, and 3PAOs to support assessments and evidence requests.
• Contribute to broader Release Engineering initiatives, including CI/CD pipelines, deployment automation, and platform reliability.

Skills

Security mindset

Cross-functional collaboration

Hands-on problem solving

Tools

AWS

Terraform

Pulumi

Python

DISA STIGs

FedRAMP controls

Job description

MatrixSpace is seeking a hands-on DevSecOps Engineer to join our Release Engineering team. You’ll build secure AWS environments, automate deployments, and ensure compliance for government customers.

You’ll work across DevOps, security, and compliance to embed FedRAMP and NIST controls into architecture and pipelines, while partnering with engineers and assessors. This role offers opportunities to influence cloud platform reliability and security from inception through ongoing operations.