FedRAMP-Ready Cloud DevSecOps Engineer

MatrixSpace; Burlington (MA); On-site; USD 120,000 - 150,000; Full time

Job summary

MatrixSpace is seeking a hands-on DevSecOps Engineer to join the Release Engineering team. You will build, operate, and secure AWS environments, drive secure CI/CD workflows, and support FedRAMP and other government security requirements.

You will collaborate with Software Engineering, AI teams, and external assessors to integrate security into architecture and deployments, while automating infrastructure and release processes.

Qualifications

• 3–6 years of experience in security engineering, cloud security, DevSecOps, infrastructure security, or a related technical field.
• Hands-on AWS experience including networking, Linux, IAM, encryption, logging, vulnerability management, and security monitoring.
• Experience with security frameworks such as FedRAMP, NIST 800-53/800-171, CMMC, RMF, or similar standards.
• Experience translating security and compliance requirements into practical technical controls with engineering teams.
• Hands-on experience with DevOps practices, Infrastructure as Code, source control, CI/CD pipelines, and automated deployment workflows.
• Knowledge of system hardening, vulnerability remediation, secure configurations, and security control lifecycle management.
• Strong problem-solving, communication, and cross-functional collaboration skills.

Responsibilities

• Build, operate, assess, and secure AWS environments against security baselines, FedRAMP requirements, and other standards.
• Partner with Software Engineering and AI teams to embed security/compliance into architecture, CI/CD, deployment, and operations.
• Support FedRAMP authorization and continuous monitoring, including POA&Ms, evidence collection, and remediation tracking.
• Perform security architecture reviews, risk assessments, vulnerability management, and DISA STIGs-based hardening.
• Implement controls across networking, Linux, IAM, encryption, logging, and monitoring.
• Develop and maintain Infrastructure as Code, CI/CD, deployment, and release automation with Terraform, Pulumi, and Python.
• Maintain security docs, diagrams, asset inventories, and control implementation details.
• Coordinate with assessors, compliance partners, and 3PAOs for audits and ongoing authorization.
• Contribute to broader Release Engineering initiatives, including pipelines, deployment automation, and platform reliability.

Skills

DevSecOps

Infrastructure as Code

AWS security

CI/CD pipelines

Vulnerability management

Security monitoring

DISA STIGs

Collaboration

Tools

Terraform

Pulumi

Python

Job description

MatrixSpace is seeking a hands-on DevSecOps Engineer to join the Release Engineering team. You will build, operate, and secure AWS environments, drive secure CI/CD workflows, and support FedRAMP and other government security requirements.

You will collaborate with Software Engineering, AI teams, and external assessors to integrate security into architecture and deployments, while automating infrastructure and release processes.