FedRAMP SRE in AWS GovCloud & ConMon

Nozomi Networks; New York (NY); On-site; USD 156,000 - 199,000; Full time

Benefits offered by this job

Medical benefits

Equity program

401(k)

Flexible PTO

Parental leave

Job summary

Nozomi Networks is seeking a Site Reliability Engineer to own and sustain the FedRAMP-authorized environment, ensuring availability, security, and continuous compliance within AWS GovCloud. You will collaborate with the team across regions to operate and improve the FedRAMP boundary while upholding strict regulatory standards.

You will patch, monitor, and automate deployments, lead ConMon activities, and drive evidence collection for audits, while communicating effectively in a distributed,

Qualifications

• US citizenship or lawful permanent residency, with all work performed from within the United States
• Proven professional experience as an SRE, DevOps, or Cloud engineer, including experience operating in a FedRAMP, FISMA, DoD IL, or similarly regulated environment
• Ability to work autonomously and communicate effectively in an async-first setup with a team based in a different time zone (Central European Time)
• Working knowledge of NIST SP 800-53 controls and the FedRAMP continuous monitoring process (scanning, POA&Ms, deviation requests, annual assessments)
• Strong hands-on experience with Kubernetes
• Hands-on experience with AWS, ideally AWS GovCloud (US)
• Experience with vulnerability management tooling (e.g., Tenable/Nessus, Qualys) and interpreting scan results into actionable remediation plans
• Good knowledge and understanding of at least one programming language (Ruby, Python, Go)
• Experience defining infrastructure as code using tools such as Terraform or CloudFormation
• Experience in the definition of CI/CD pipelines using technologies like Jenkins, GitHub Actions, or similar
• Demonstrable experience using AI-enabled tools as part of day-to-day work to improve efficiency, quality, or decision-making, while applying sound professional judgement and maintaining accountability for outputs — within the constraints of a regulated environment

Responsibilities

• Own the FedRAMP environment ensuring its availability, performance, and continuous compliance with the FedRAMP baseline
• Build and maintain the cloud infrastructure and related services within the FedRAMP authorization boundary (AWS GovCloud)
• Own the patching and vulnerability remediation lifecycle, meeting FedRAMP remediation SLAs (30/90/180 days by severity) and maintaining evidence
• Execute and improve the Continuous Monitoring (ConMon) program: monthly vulnerability scanning, POA&M creation and tracking, deviation requests, and monthly deliverables to 3PAO and agency sponsors
• Manage deployments and change control within the boundary, following the Configuration Management process and Significant Change Request procedures
• Maintain system hardening against CIS/STIG benchmarks and FIPS-validated cryptography requirements
• Promote and implement automated solutions across deployment, patching, evidence collection, and operations
• Troubleshoot issues across the stack from network and OS to applications
• Support annual assessments and audits (3PAO), producing artifacts and demonstrating control implementation
• Drive post-incident analysis according to no-blame culture, including incident reporting obligations to agency stakeholders and US-CERT/CISA
• Participate in periodic on-call duties for the FedRAMP environment
• Operate in settings with strong confidentiality and data privacy protocols

Skills

Kubernetes

AWS GovCloud

CI/CD

Terraform

CloudFormation

Ruby

Python

Go

Vulnerability management

Tenable/Nessus

Qualys

FedRAMP regulatory knowledge

Tools

Tenable/Nessus

Qualys

Job description

Nozomi Networks is seeking a Site Reliability Engineer to own and sustain the FedRAMP-authorized environment, ensuring availability, security, and continuous compliance within AWS GovCloud. You will collaborate with the team across regions to operate and improve the FedRAMP boundary while upholding strict regulatory standards.

You will patch, monitor, and automate deployments, lead ConMon activities, and drive evidence collection for audits, while communicating effectively in a distributed,