FedRAMP Infrastructure Security Engineer

JobCubby; Northern (KY); Hybrid; USD 168,000 - 238,000; Full time

Benefits offered by this job

Benefits to support health and well‑be

Equity compensation

Employee Stock Purchase Plan

Growth and development fund

Parental leave

Team member resource groups

Flexible paid time off

Job summary

GitLab is seeking a Staff Security Engineer to lead infrastructure security for FedRAMP and related offerings. You will define patterns, drive secure-by-design practices, and collaborate with partner engineering teams to deliver secure platforms for government workloads.

Based in the United States, you will mentor engineers, influence cross-team security initiatives, and help translate FedRAMP controls into concrete technical actions across GitLab’s cloud SaaS and self-managed products.

Qualifications

• U.S. citizenship and residency required.
• Expert knowledge of security for cloud infrastructure (AWS/GCP/Azure).
• Deep FedRAMP knowledge and operational realities of an authorized environment.
• Proficiency in Go, Python, and Ruby with production security tooling experience.
• Experience with Infrastructure-as-Code security and automated compliance.

Responsibilities

• Set the technical direction and patterns for FedRAMP infrastructure security.
• Own the security posture of FedRAMP environments and partner with Public Sector SRE.
• Lead multi-quarter security initiatives with clear success criteria.
• Conduct security reviews and threat modeling for Federal infrastructure.
• Apply AI to security workflows in compliance-constrained environments.
• Communicate tradeoffs to technical and non-technical audiences, including leadership.
• Plan, prioritize, and roadmap infrastructure security aligned with business goals.
• Mentor engineers and foster inclusive collaboration.

Skills

Cloud security

FedRAMP knowledge

Kubernetes

Go

Python

Terraform

Policy as code

AI for security

Communication

Tools

Terraform

Ansible

CloudFormation

Job description

GitLab is seeking a Staff Security Engineer to lead infrastructure security for FedRAMP and related offerings. You will define patterns, drive secure-by-design practices, and collaborate with partner engineering teams to deliver secure platforms for government workloads.

Based in the United States, you will mentor engineers, influence cross-team security initiatives, and help translate FedRAMP controls into concrete technical actions across GitLab’s cloud SaaS and self-managed products.