FedRAMP Cloud Security & DevSecOps Engineer

Epsilon ASI; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

Epsilon ASI is seeking a Cloud Security / DevSecOps Engineer to strengthen a FedRAMP-compliant AWS environment. This hands-on role focuses on cloud infrastructure, security automation, vulnerability remediation, and compliance across teams.

You will drive IaC with Terraform, address Golang/container vulnerabilities, and implement CI/CD automation with GitHub Actions while aligning with NIST controls and regulatory standards.

Qualifications

• Hands-on with Terraform and IaC.
• Go language experience for vulnerability addressing.
• CI/CD pipelines with GitHub Actions.
• Experience with AWS cloud infrastructure.
• Strong understanding of cloud and infrastructure security.
• Identify and remediate vulnerabilities in containers and cloud environments.
• Familiarity with NIST security guidelines and frameworks.
• Experience in security-conscious or regulated environments.

Responsibilities

• Maintain and improve FedRAMP compliance within an AWS environment.
• Manage infrastructure using Terraform and IaC best practices.
• Identify and remediate Golang/container vulnerabilities and other security issues.
• Investigate and resolve cloud infrastructure misconfigurations.
• Review systems against NIST controls and security guidelines.
• Develop and maintain CI/CD automation using GitHub Actions.
• Partner with engineering teams to integrate security into the SDLC.
• Monitor for security vulnerabilities and compliance gaps.

Skills

Terraform IaC

Go (Golang)

GitHub Actions CI/CD

AWS Cloud

Cloud Security

Vulnerability remediation

NIST guidelines

Security in regulated env

Tools

Kubernetes

Container security

Rust (plus)

Job description

Epsilon ASI is seeking a Cloud Security / DevSecOps Engineer to strengthen a FedRAMP-compliant AWS environment. This hands-on role focuses on cloud infrastructure, security automation, vulnerability remediation, and compliance across teams.

You will drive IaC with Terraform, address Golang/container vulnerabilities, and implement CI/CD automation with GitHub Actions while aligning with NIST controls and regulatory standards.