Senior DevSecOps Engineer - FedRAMP Cloud & Automation

Doist; Reston (VA); On-site; USD 155,000 - 205,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K with 4% match

Disability insurance (short & long)

AD&D and life insurance

Flexible time off

Annual bonuses

Training stipends

Certification reimbursements

Access to 30k+ online courses

Cell phone allowance

Home office stipend

Spot awards

11 paid holidays

Job summary

Fortreum is hiring a DevSecOps Engineer to deploy, integrate, and operationalize the Kovr AI Platform within enterprise and federal environments. You will automate evidence collection, drive continuous monitoring, and configure compliance workflows across cloud and hybrid environments.

You will work as a hands-on technical bridge between our customers and Kovr’s engineering team, solving complex deployment challenges and supporting ATO readiness for sensitive National Security and IC contexts.

Qualifications

• 7+ years of DevOps, Platform Engineering, or Site Reliability Engineering experience.
• Hands-on experience architecting AWS infrastructure using Terraform at scale.
• Strong production experience with Kubernetes (EKS or similar), including cluster design, Helm Charts, and GitHub/GitOps workflows.
• Direct experience with FedRAMP, CMMC, NIST 800-53/800-171, or DoD SRG compliance environments.
• Familiarity with OSCAL or other machine-readable compliance/documentation frameworks.
• Experience integrating SAST/DAST or IaC security scanning into a pipeline.
• Scripting/automation proficiency (Python, Bash, or similar).
• U.S. Citizenship, with the ability to obtain and maintain a Top Secret clearance.
• Comfortable working in a fast-moving startup-within-a-company environment.
• Local to Washington, DC metro area

Responsibilities

• Design, build, and maintain CI/CD pipelines supporting rapid, secure software delivery.
• Manage cloud infrastructure (AWS, with exposure to Azure/GCP) using Infrastructure as Code (Terraform).
• Administer and scale containerized workloads (Kubernetes/EKS, Helm, ArgoCD).
• Implement and maintain security controls and monitoring aligned to NIST 800-53 and OSCAL-based frameworks.
• Design observability strategy (logging, metrics, alerting, SLOs) to support production reliability at scale.
• Integrate DevOps tooling (GitHub, JIRA, Splunk, Snyk) into automated compliance and remediation workflows.
• Collaborate with existing engineering and compliance teams to ensure infrastructure changes maintain continuous authorization posture.
• Support continuous monitoring and audit-readiness activities, including evidence collection and control mapping.
• Troubleshoot production issues and drive continuous improvement in deployment reliability.
• Build and maintain documentation, runbooks, and architecture decision records.
• Represent infrastructure/security in cross-functional planning, including customer-facing technical conversations when needed

Skills

DevOps

Platform Engineering

SRE

AWS

Kubernetes

Terraform

GitHub/GitOps

Security

Python

Bash

Tools

Terraform

Kubernetes

Helm

ArgoCD

Jira

Splunk

Snyk

GitHub

Job description

Fortreum is hiring a DevSecOps Engineer to deploy, integrate, and operationalize the Kovr AI Platform within enterprise and federal environments. You will automate evidence collection, drive continuous monitoring, and configure compliance workflows across cloud and hybrid environments.

You will work as a hands-on technical bridge between our customers and Kovr’s engineering team, solving complex deployment challenges and supporting ATO readiness for sensitive National Security and IC contexts.