Senior SecDevOps Engineer - Federal Cloud Security

Zearch Ltd; Virginia; On-site; USD 140,000 - 200,000; Full time

Job summary

Zearch Ltd. in the United States is hiring for a senior SecDevOps / cloud security engineer to build and operate secure cloud platforms across AWS, Azure and GCP. You will implement Zero Trust, automated compliance, and policy-as-code to protect mission-critical environments.

Key tasks include designing secure CI/CD pipelines, managing secrets with Vault, enforcing least privilege, and integrating identity providers across clouds. A strong background in FedRAMP and NIST 800-53 is preferred.

Qualifications

• 5–7 years in SecDevOps or cloud security/ platform engineering
• Proficient with at least one hyperscaler (Azure/GCP) and AWS exposure
• Deep experience with Terraform and scripting (Python, Bash or PowerShell)
• Experience with identity providers (Okta/Entra ID) and secrets management (Vault)
• Familiarity with FedRAMP, NIST 800-53 or SOC 2
• Sole U.S. citizenship

Responsibilities

• Design, automate and maintain secure cloud infrastructure and CI/CD pipelines
• Operate Zero Trust architectures and app connectors
• Own secrets lifecycle with Vault and automated rotation
• Integrate federated identity and enforce least privilege
• Build multi-tenant infrastructure in Terraform mapped to FedRAMP IL4 controls
• Develop secure CI/CD pipelines with SAST, SCA and container scanning
• Deploy and troubleshoot workloads on EKS, AKS, GKE via Helm/ArgoCD/Kustomize
• Automate FedRAMP ConMon evidence and drive remediation via NIST 800-53 controls
• Lead ServiceNow CAB / eCAB and Technical Change Reviews
• Build observability with Grafana/Prometheus/CloudWatch and participate in on-call (PagerDuty)

Skills

Zero Trust

Policy-as-Code

CI/CD security

Tools

Terraform

Kubernetes

Docker

HashiCorp Vault

GitLab CI

Azure DevOps

Jenkins

ArgoCD

Helm

Kustomize

CloudFormation

Okta

Entra ID

AWS IAM Identity Center

Prometheus

Grafana

CloudWatch

FedRAMP

Job description

Zearch Ltd. in the United States is hiring for a senior SecDevOps / cloud security engineer to build and operate secure cloud platforms across AWS, Azure and GCP. You will implement Zero Trust, automated compliance, and policy-as-code to protect mission-critical environments.

Key tasks include designing secure CI/CD pipelines, managing secrets with Vault, enforcing least privilege, and integrating identity providers across clouds. A strong background in FedRAMP and NIST 800-53 is preferred.