GovCloud DevOps Lead - FedRAMP & Compliance

Windward; Washington, Baltimore (District of Columbia, MD); On-site; USD 180,000 - 240,000; Full time

Job summary

Windward is seeking a senior infrastructure leader to build and run the US federal GovCloud environment from ground up. You will own end-to-end governance, security posture, cost controls and compliance, migrating federal workloads, and coordinating with auditors and prime contractors.

This is a greenfield, high-visibility role requiring leadership and deep AWS GovCloud expertise. You will collaborate with security and product teams to implement agentic tooling, CI/CD, and centralized logging

Qualifications

• 7+ years in DevOps, SRE, platform or cloud infra with 3+ years hands-on in AWS GovCloud (US)
• Proven FedRAMP authorization and/or government-to-commercial migration experience
• Able to conduct audits with defensible findings and evidence
• Eligible for active US govt security clearance (Secret minimum)
• Deep AWS expertise: IAM/KMS/VPC, GuardDuty, Security Hub, Config, CloudTrail
• Expert-level Terraform, multi-account state management
• Production Kubernetes experience (EKS) with security hardening
• AI-first approach to infrastructure with agentic tooling and human gates
• Proven ability to ship infrastructure quickly in unfamiliar codebases
• People management and mentorship experience
• Comfort as senior technical voice with auditors and prime security teams

Responsibilities

• Build GovCloud from scratch: accounts, networking, identity, encryption, logging, boundary protection
• Own the environment's availability, security posture, patch state, cost and audit readiness
• Lead end-to-end migration of federal workloads, including plan, cutover and rollback criteria
• Conduct internal audits and stand behind assessment to external assessors
• Define FedRAMP authorization boundary and compile technical evidence
• Own infrastructure as code (Terraform) with drift detection and policy guardrails
• Build and operate Kubernetes (EKS) workloads in GovCloud
• Create FedRAMP-compliant CI/CD with separated pipelines and SBOM provenance
• Implement continuous monitoring, ConMon cycle and POAM management
• Stand up centralized logging, audit trails and federal retention requirements
• Collaborate with CISO, 3PAO and primes on assessment readiness and SSP maintenance
• Establish runbooks, DR/BCP, and RPO/RTO validation
• Apply agentic tooling for evidence collection and control validation
• Hire, onboard and lead the US federal infra team and set on-call culture

Skills

DevOps leadership

SRE experience

AWS GovCloud

FedRAMP knowledge

Audit readiness

Terraform

Kubernetes (EKS)

CI/CD automation

Incident management

Security/compliance mindset

Tools

Terraform

Kubernetes (EKS)

GitHub Actions

Coralogix

Semgrep

GHAS

MongoDB Atlas for Gov

SingleStore (MemSQL)

Job description

Windward is seeking a senior infrastructure leader to build and run the US federal GovCloud environment from ground up. You will own end-to-end governance, security posture, cost controls and compliance, migrating federal workloads, and coordinating with auditors and prime contractors.

This is a greenfield, high-visibility role requiring leadership and deep AWS GovCloud expertise. You will collaborate with security and product teams to implement agentic tooling, CI/CD, and centralized logging