Senior DevOps Engineer: FedRAMP & Compliance Lead

Menlo Ventures; United States; On-site; USD 170,000 - 240,000; Full time

Benefits offered by this job

Flexible PTO

Health insurance

Monthly phone/internet stipend

401k

Home office stipend

Job summary

Zafran is seeking a Senior DevOps Engineer in the United States to lead our security and compliance posture for FedRAMP readiness. You will harden infrastructure, implement controls across AWS, Kubernetes, and CI/CD, and build evidence pipelines for ongoing compliance.

You’ll work closely with Security and remote DevOps teams to stay ahead of federal requirements. Ideal candidates have 5+ years in DevOps with a strong security focus, hands-on FedRAMP/HIPAA/ISO controls, and deep AWS/Kubernetes

Qualifications

• 5+ years of DevOps/platform engineering experience with a strong security focus.
• Direct experience implementing controls for SOC 2, ISO 27001, HIPAA, PCI, or FedRAMP.
• Deep AWS security knowledge: IAM, KMS, GuardDuty, Security Hub, VPC design, Config.
• Strong Kubernetes security experience: network policies, admission control, runtime security.
• Infrastructure as Code with Terraform, policy-as-code focus.
• CI/CD security: SAST, DAST, SCA, image scanning, supply chain hardening.
• Scripting in Python or Bash.

Responsibilities

• Lead the technical work to achieve and maintain compliance certifications (SOC 2, ISO 27001, FedRAMP).
• Design and implement security controls across AWS, CI/CD pipelines, Kubernetes, and deployments.
• Build automation, logging, and evidence collection for continuous compliance.
• Maintain secrets management, IAM hardening, network segmentation, and encryption standards.
• Develop infrastructure solutions for regulated customers, including isolated environments.
• Collaborate on threat modeling, vulnerability management, and incident response.
• Translate federal requirements (FedRAMP, FISMA) into concrete engineering work.

Skills

DevOps experience

AWS security

Kubernetes security

Terraform

CI/CD security

Python/Bash scripting

Tools

AWS

Kubernetes

Terraform

Python

Job description

Zafran is seeking a Senior DevOps Engineer in the United States to lead our security and compliance posture for FedRAMP readiness. You will harden infrastructure, implement controls across AWS, Kubernetes, and CI/CD, and build evidence pipelines for ongoing compliance.

You’ll work closely with Security and remote DevOps teams to stay ahead of federal requirements. Ideal candidates have 5+ years in DevOps with a strong security focus, hands-on FedRAMP/HIPAA/ISO controls, and deep AWS/Kubernetes