DevSecOps Engineer II - FedRAMP-Ready Cloud Reliability

RiskForce; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

RiskForce is seeking a DevSecOps-focused engineer to own the reliability, security, and scalability of our cloud infrastructure and deployment pipelines. You will automate provisioning, security hardening, and compliance for federal and regulated-industry customers.

You will design and maintain CI/CD pipelines, manage Terraform/AWS infrastructure, and operate Kubernetes/ECS clusters while embedding security across the software delivery lifecycle.

Qualifications

• 3-5+ years of professional experience in DevOps, SRE, or cloud infrastructure engineering.
• Strong hands-on experience with AWS or Azure cloud services in production (GovCloud experience preferred).
• Proficiency with infrastructure-as-code using Terraform or equivalent tooling.
• Solid experience with Docker, Kubernetes, and container orchestration in production environments.
• Demonstrated ability to build and maintain CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, or similar).
• Scripting proficiency in Bash, Python, or similar languages for automation and tooling.
• Strong understanding of networking fundamentals, firewall rules, load balancing, and DNS.
• Familiarity with federal compliance frameworks such as FedRAMP, NIST 800-53, or CMMC.

Responsibilities

• Design, build, and maintain CI/CD pipelines for automated testing, builds, and zero-downtime deployments across multiple environments
• Provision and manage cloud infrastructure using infrastructure-as-code tools such as Terraform, Pulumi, or CloudFormation
• Operate and optimize container orchestration platforms (Kubernetes, ECS) for production workloads
• Implement compliance hardening across environments to support federal security frameworks including FedRAMP and NIST 800-53
• Build and maintain monitoring, alerting, and observability stacks to ensure platform health and rapid incident detection
• Manage secrets management solutions, IAM policies, and environment isolation strategies
• Lead incident response efforts and develop runbooks, post-mortems, and operational documentation
• Collaborate closely with engineering, security, and compliance teams to embed security into every stage of the software delivery lifecycle
• Evaluate and implement tooling improvements to increase deployment velocity, reliability, and auditability

Skills

DevSecOps focus

CI/CD mindset

Automation & scripting

Security awareness

Infrastructure thinking

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Pulumi

CloudFormation

Docker

Kubernetes

ECS

GitHub Actions

GitLab CI

Azure DevOps

Job description

RiskForce is seeking a DevSecOps-focused engineer to own the reliability, security, and scalability of our cloud infrastructure and deployment pipelines. You will automate provisioning, security hardening, and compliance for federal and regulated-industry customers.

You will design and maintain CI/CD pipelines, manage Terraform/AWS infrastructure, and operate Kubernetes/ECS clusters while embedding security across the software delivery lifecycle.