Senior SecDevOps Engineer – FedRAMP Cloud Security

Knox Systems; Arlington (VA); On-site; USD 155,000 - 185,000; Full time

Benefits offered by this job

Medical insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

Unlimited PTO

401(k)

Job summary

Knox Systems is seeking a SecDevOps Engineer to design, automate, and maintain secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP within FedRAMP-authorized boundaries. You will focus on Zero Trust access, continuous monitoring, and security observability.

The ideal candidate has 5–7 years of hands-on experience bridging cloud engineering with security operations and implements security controls directly into deployment through IaC and Policy-as-Code.

Qualifications

• 5–7 years in SecDevOps, Cloud Security Engineering, DevOps, or Platform Engineering.
• Hands-on production experience with at least one major cloud (AWS preferred).
• Experience with Terraform and scripting (Python, Bash, or PowerShell).
• Experience managing identity and secrets tooling (Okta/Entra ID, Vault).
• Familiarity with FedRAMP/NIST 800-53 or similar compliance frameworks.

Responsibilities

• Design, build, and manage multi-tenant secure cloud infrastructure across AWS, Azure, and GCP.
• Automate provisioning, configuration management, and deployment workflows via secure CI/CD and GitOps.
• Maintain IAM topologies and security configurations aligned with FedRAMP controls.
• Develop and maintain secure CI/CD pipelines and integrate Policy-as-Code into gates.
• Embed SAST, SCA, and container scanning into deployment workflows.
• Operate containerized workloads in Kubernetes (EKS/AKS/GKE) with Helm/ArgoCD.

Skills

Terraform

Kubernetes

IaC

CI/CD

Secrets management

Zero Trust

Tools

HashiCorp Vault

Okta/Entra ID

AWS/GCP/Azure

GitLab CI / Azure DevOps / Jenkins

Job description

Knox Systems is seeking a SecDevOps Engineer to design, automate, and maintain secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP within FedRAMP-authorized boundaries. You will focus on Zero Trust access, continuous monitoring, and security observability.

The ideal candidate has 5–7 years of hands-on experience bridging cloud engineering with security operations and implements security controls directly into deployment through IaC and Policy-as-Code.