Senior SecDevOps Engineer - Secure Multi-Cloud (FedRAMP)

The Phoenix Group; Arlington (VA); On-site; USD 120,000 - 190,000; Full time

Job summary

The Phoenix Group seeks a highly skilled SecDevOps Engineer to lead the design, automation, and maintenance of secure cloud infrastructure and CI/CD pipelines in multi-cloud environments. This role emphasizes Zero Trust architectures, continuous security monitoring, and FedRAMP/NIST 800-53 compliance within federal cloud platforms.

You will automate provisioning via Terraform, Ansible, and CloudFormation, manage credentials with Vault and Okta/Entra ID, and implement policy-driven security using

Qualifications

• 3–5 years of professional experience in SecDevOps, Cloud Security Engineering, Platform Engineering, or DevOps.
• Hands-on experience with at least one major hyperscaler (AWS preferred); working knowledge of Azure and GCP.
• Advanced skills in Infrastructure as Code (Terraform, Ansible, CloudFormation) and scripting languages (Python, Bash, PowerShell).
• Proven experience managing enterprise identity/access solutions (Okta, Entra ID) and secrets management platforms (HashiCorp Vault, AWS KMS, Azure Key Vault).
• Familiarity with security tooling such as endpoint protection, CSPM, and vulnerability scanners (CrowdStrike, Wiz, Qualys).
• Strong understanding of containerization and orchestration platforms (Docker, Kubernetes).
• Practical knowledge of FedRAMP, NIST 800-53, SOC 2 frameworks, or comparable compliance standards.

Responsibilities

• Own development and management of secure, compliant cloud infrastructures across multiple providers.
• Enhance automation, security, and observability for robust federal cloud operations and continuous compliance.
• Implement Zero Trust architectures and secure deployment workflows with IaC and Policy-as-Code.
• Build and maintain secure CI/CD pipelines and GitOps processes (ArgoCD, Helm).
• Lead incident response and on-call troubleshooting with root-cause analysis.
• Support FedRAMP continuous monitoring, POA&M tracking, and remediation activities.
• Embed SAST, SCA, and container vulnerability scanning into deployment workflows.
• Define and report on SLIs/SLOs for critical cloud security services.

Skills

Cloud security engineering

SecDevOps

Automation & CI/CD

Identity & access management

Incident response

Tools

Terraform

Ansible

CloudFormation

Python

Bash

PowerShell

Okta

Entra ID

HashiCorp Vault

AWS IAM

Azure AD

Zscaler ZPA

OPA

HashiCorp Sentinel

Grafana

Prometheus

CloudWatch

ArgoCD

Kubernetes

Docker

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Job description

The Phoenix Group seeks a highly skilled SecDevOps Engineer to lead the design, automation, and maintenance of secure cloud infrastructure and CI/CD pipelines in multi-cloud environments. This role emphasizes Zero Trust architectures, continuous security monitoring, and FedRAMP/NIST 800-53 compliance within federal cloud platforms.

You will automate provisioning via Terraform, Ansible, and CloudFormation, manage credentials with Vault and Okta/Entra ID, and implement policy-driven security using