Senior SecDevOps Engineer: Secure Multi-Cloud & CI/CD

Benchstrength; Arlington (VA); On-site; USD 155,000 - 185,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Unlimited PTO

401k plan

Job summary

Knox is seeking a SecDevOps Engineer to design, automate, and secure multi-cloud infrastructure across AWS, Azure, and GCP within FedRAMP boundaries. Day-to-day, the role centers on Zero Trust access, continuous monitoring, cloud security posture, and observability—keeping operations secure, compliant, and repeatable.

The ideal candidate brings 5–7 years bridging cloud engineering with security operations and will embed security controls into deployment using IaC and Policy-as-Code.

Qualifications

• 5–7 years of SecDevOps or cloud security engineering experience.
• Hands-on with one major cloud (AWS preferred) and exposure to Azure/GCP.
• Proficient in Terraform and scripting (Python/Bash/PowerShell).
• Experience managing identity and secrets (Okta, Entra ID, Vault).
• Knowledge of FedRAMP/NIST 800-53 and security tooling.

Responsibilities

• Design, build, and secure multi-tenant cloud infrastructure across AWS/Azure/GCP using IaC.
• Automate provisioning, config, and deployment with secure CI/CD and GitOps.
• Manage IAM topologies, networking, and FedRAMP controls (IL4).
• Integrate Policy-as-Code in pipelines and perform container security checks.
• Monitor, respond to incidents, and improve observability and reliability.

Skills

SecDevOps

Cloud Security

IAM & Secrets

FedRAMP/NIST knowledge

Container experience

Education

Bachelor's degree in CS or related field

Tools

Terraform

CloudFormation

GitOps (ArgoCD / Helm)

Okta / Entra ID

HashiCorp Vault

AWS IAM Identity Center

CrowdStrike / Wiz / Qualys

Docker / Kubernetes

Grafana / Prometheus / CloudWatch

Job description

Knox is seeking a SecDevOps Engineer to design, automate, and secure multi-cloud infrastructure across AWS, Azure, and GCP within FedRAMP boundaries. Day-to-day, the role centers on Zero Trust access, continuous monitoring, cloud security posture, and observability—keeping operations secure, compliant, and repeatable.

The ideal candidate brings 5–7 years bridging cloud engineering with security operations and will embed security controls into deployment using IaC and Policy-as-Code.