Senior SecDevOps Engineer - Multi-Cloud Security & FedRAMP

Zearch Ltd; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

Zearch Ltd. is seeking a senior SecDevOps/Cloud Security Engineer to design, automate, and maintain secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP.

You will implement Zero Trust architectures, manage secrets with Vault, and enforce least privilege with federated identities. You’ll deploy multi-tenant Terraform configurations, build secure CI/CD pipelines, and ensure FedRAMP/NIST controls are met.

Qualifications

• 5-7 years in SecDevOps, Cloud Security Engineering, DevOps or Platform Engineering.
• Hands-on production experience with at least one hyperscaler (Azure or GCP), plus working exposure to AWS
• High proficiency in Terraform and strong scripting (Python, Bash or PowerShell)
• Practical experience with enterprise identity (Okta, Entra ID) and secrets management (Vault, AWS KMS, Azure Key Vault)
• Experience operating EDR, CSPM or vulnerability tools such as CrowdStrike, Wiz or Qualys
• Experience building and troubleshooting Docker and Kubernetes environments
• A working understanding of FedRAMP, NIST 800-53 or SOC 2
• Sole U.S. citizenship (dual citizens cannot be considered)

Responsibilities

• Design, automate and maintain secure cloud infrastructure and CI/CD pipelines.
• Operate Zero Trust architectures (Zscaler ZPA / PRA), including app connectors and privileged remote access.
• Own the secrets lifecycle in HashiCorp Vault, with automated credential flows and programmatic rotation.
• Integrate federated identity (Okta, Entra ID, AWS IAM Identity Center), supporting multi-cloud identity migrations and enforcing least privilege.
• Building multi-tenant infrastructure in Terraform (CloudFormation as needed), with networking, IAM and security groups mapped to FedRAMP IL4 controls.
• Developing secure CI/CD pipelines (GitLab CI, Azure DevOps, Jenkins) with OPA or Azure Policy gates and embedded SAST, SCA and container scanning.
• Deploying and troubleshooting workloads on EKS, AKS and GKE via Helm, ArgoCD or Kustomize.
• Automating FedRAMP ConMon audit evidence (CM-2, CM-6, AU-2, SC-12) and driving remediation through NIST 800-53 controls.
• Leading changes through ServiceNow CAB / eCAB and Technical Change Reviews.
• Building observability in Grafana, Prometheus and CloudWatch, owning SLIs and SLOs, and joining on-call (PagerDuty) for P1 war rooms and root-cause analysis

Skills

Terraform

Python

Bash

PowerShell

Okta

Entra ID

Kubernetes

GitLab CI

Jenkins

Tools

HashiCorp Vault

AWS

GCP

Azure

CloudFormation

Helm

ArgoCD

Kustomize

Job description

Zearch Ltd. is seeking a senior SecDevOps/Cloud Security Engineer to design, automate, and maintain secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP.

You will implement Zero Trust architectures, manage secrets with Vault, and enforce least privilege with federated identities. You’ll deploy multi-tenant Terraform configurations, build secure CI/CD pipelines, and ensure FedRAMP/NIST controls are met.