Remote FedRAMP DevSecOps Engineer - AWS Security Lead

Craft Machine Inc; United States; Hybrid; USD 170,000 - 210,000; Full time

Benefits offered by this job

Equity

Unlimited vacation

Health + Dental + Vision

401K

Job summary

Craft is seeking a Senior DevSecOps Engineer to lead FedRAMP readiness and secure cloud architecture. You will translate NIST controls into scalable technical implementations and drive security across AWS, IAM, VPCs, and CI/CD pipelines.

You’ll partner with Infrastructure, Engineering, and Security to shape the authorization program, manage POA&M remediation, and build auditable controls for Class C and D. Remote/hybrid work available.

Qualifications

• 5+ years hands-on DevSecOps experience.
• Strong AWS security knowledge and design.
• Deep knowledge of NIST 800-53 Rev.5 controls.
• Experience in FedRAMP/DoD IL/SOC 2 or ISO 27001 boundary.
• Proficient in Terraform with auditable infrastructure.
• Experience securing CI/CD pipelines with security gates and secrets management.

Responsibilities

• Design and implement AWS architecture meeting FedRAMP Class C and Class D requirements.
• Translate NIST controls into auditable technical implementations.
• Build and maintain compliance automation tooling.
• Develop secure CI/CD pipelines with security gates and secrets management.
• Contribute to SSPs, control statements, and audit packages.
• Perform threat modeling and risk assessments.
• Manage POA&M remediation across teams.

Skills

DevSecOps

AWS security

NIST 800-53 Rev.5

Terraform

CI/CD security

Threat modeling

POA&M management

Security automation

VPC design

Tools

Terraform

CI/CD tooling

SSP tooling

Job description

Craft is seeking a Senior DevSecOps Engineer to lead FedRAMP readiness and secure cloud architecture. You will translate NIST controls into scalable technical implementations and drive security across AWS, IAM, VPCs, and CI/CD pipelines.

You’ll partner with Infrastructure, Engineering, and Security to shape the authorization program, manage POA&M remediation, and build auditable controls for Class C and D. Remote/hybrid work available.