Secure Cloud DevOps Engineer (FedRAMP)

Knox Systems, Inc.; Arlington (VA); On-site; USD 125,000 - 130,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life & Disability

401k

Job summary

Knox Systems, Inc. is seeking a SecDevOps Engineer to design, automate, and maintain secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP within FedRAMP-authorized boundaries.

You will focus on Zero Trust access, continuous monitoring, and policy-driven security. The ideal candidate has hands-on cloud architecture experience, automation expertise, and a security-ops mindset, embedding security controls via IaC and Policy-as-Code.

Qualifications

• 3–5 years of experience in SecDevOps, Cloud Security Engineering, DevOps, or Platform Engineering.
• Hands-on production experience with at least one major cloud (AWS preferred), with exposure to Azure and/or GCP.
• High proficiency in Terraform and scripting (Python, Bash, or PowerShell); familiarity with Ansible is preferred.
• Experience managing enterprise identity/access tooling (Okta, Entra ID) and secrets management platforms (Vault, AWS KMS, or Azure Key Vault).
• Familiarity with CSPM, EDR, or vulnerability scanning tools.
• Experience with Docker and Kubernetes.
• Understanding FedRAMP, NIST 800-53, or SOC 2 compliance frameworks.

Responsibilities

• Support and operate Zero Trust Network Access architectures (Zscaler ZPA/PRA) including app connectors and privileged remote access.
• Manage privileged credentials, API tokens, and secrets lifecycle with HashiCorp Vault and automate rotation.
• Integrate federated identity providers (Okta, Entra ID, AWS IAM Identity Center) and support multi-cloud migrations.
• Enforce least-privilege access models across automation systems.
• Build and manage multi-tenant infrastructure across AWS, Azure, and GCP using Terraform as primary, with Ansible/CloudFormation as needed.
• Automate provisioning, configuration management, and deployment workflows via secure CI/CD and GitOps.
• Manage cloud networking, IAM topologies, and security group configs per FedRAMP IL4.
• Develop & maintain secure CI/CD pipelines using GitHub Actions, GitLab CI, Azure DevOps, or Jenkins.
• Incorporate Policy-as-Code (OPA, Sentinel, Azure Policy) into gates for compliance.
• Embed SAST, SCA, and container scans into deployment workflows.
• Deploy containerized workloads in Kubernetes (EKS/AKS/GKE) using Helm/ArgoCD/Kustomize.
• Monitor FedRAMP ConMon cycles, track POA&M, and coordinate remediation.
• Maintain IaC & pipeline configs compliant with FedRAMP/NIST 800-53.
• Prepare documentation for CAB/eCAB and change management in ServiceNow.
• Operate dashboards, logs, and metrics in Grafana/Prometheus/CloudWatch.

Skills

Terraform

Python

Bash

PowerShell

Ansible

CloudFormation

ArgoCD

Helm

Okta

EntrtAID / Entra ID

AWS IAM Identity Center

Vault

Kubernetes

Docker

FedRAMP/NIST

CrowdStrike

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Job description

Knox Systems, Inc. is seeking a SecDevOps Engineer to design, automate, and maintain secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP within FedRAMP-authorized boundaries.

You will focus on Zero Trust access, continuous monitoring, and policy-driven security. The ideal candidate has hands-on cloud architecture experience, automation expertise, and a security-ops mindset, embedding security controls via IaC and Policy-as-Code.