Senior Site Reliability Engineer (FedRAMP)

nozominetworks; United States; Remote; USD 156,000 - 199,000; Full time

Benefits offered by this job

Medical, dental, vision

Life and disability coverage

Equity and/or variable bonus programs

401(k) plan with employer match

Flexible paid time off

Paid holidays

Paid parental leave

Async-first collaboration

Job summary

Nozomi Networks in the United States seeks a Senior Site Reliability Engineer to own the reliability, security posture, and continuous compliance of a FedRAMP‑authorized cloud environment serving OT and IoT cybersecurity customers.

You will collaborate with a Switzerland‑based SRE team to manage AWS GovCloud, patching, monitoring, and audits, while supporting the company’s expansion into the US public sector and applying automation across deployments.

Qualifications

• US citizenship or lawful permanent residency and ability to pass background checks.
• Hands-on SRE/DevOps experience in FedRAMP, FISMA, or other regulated envs.
• Strong knowledge of NIST SP 800-53 and FedRAMP monitoring processes.

Responsibilities

• Own day-to-day availability, performance, and FedRAMP baseline compliance for the authorized cloud.
• Drive patching, vulnerability remediation, and evidence-ready reporting.
• Operate the continuous monitoring program, scans, POA&Ms, and 3PAO/a gency deliverables.
• Manage deployments within the authorization boundary and perform change control.
• Maintain CIS/STIG hardening and FIPS-validated cryptography; automate tasks.
• Support audits, lead post-incident reviews, and participate in on-call duties.

Skills

Kubernetes

AWS GovCloud

CI/CD

Programming (Ruby/Python/Go)

Tools

Terraform

CloudFormation

Jenkins

GitHub Actions

Tenable/Nessus

Qualys

Job description

Role overview

A Senior Site Reliability Engineer role focused on a FedRAMP-authorized cloud environment supporting OT and IoT cybersecurity customers. The engineer will act as the primary owner of the environment's reliability, security posture, and continuous compliance, working closely with a Switzerland-based SRE team and the Security & Compliance organization. The role carries significant autonomy and serves the company's expansion into the US public sector.

Responsibilities

• Own day-to-day availability, performance, and continuous FedRAMP baseline compliance for the authorized environment, including AWS GovCloud infrastructure.
• Drive the patching and vulnerability remediation lifecycle, meeting 30/90/180-day FedRAMP SLAs by severity and maintaining supporting evidence.
• Run and improve the Continuous Monitoring program: monthly vulnerability scans, POA&M creation and tracking, deviation requests, and monthly deliverables to the 3PAO and agency sponsors.
• Manage deployments and change control within the authorization boundary, following Configuration Management and Significant Change Request procedures.
• Maintain system hardening against CIS/STIG benchmarks and FIPS-validated cryptography, while automating deployment, patching, evidence collection, and operational tasks.
• Support annual 3PAO assessments and audits, troubleshoot across the full technology layer, lead post-incident reviews, and participate in on-call duties.

Requirements

• US citizenship or lawful permanent residency, with all work performed inside the United States, and the ability to pass applicable background investigations.
• Proven SRE, DevOps, or cloud engineering experience operating within FedRAMP, FISMA, DoD IL, or similarly regulated environments.
• Working knowledge of NIST SP 800-53 controls and the FedRAMP continuous monitoring process, including scanning, POA&Ms, deviation requests, and annual assessments.
• Strong hands-on Kubernetes experience and practical AWS experience, ideally AWS GovCloud (US).
• Proficiency with vulnerability management tooling such as Tenable/Nessus or Qualys, and the ability to turn scan results into remediation plans.
• Hands-on coding in at least one of Ruby, Python, or Go, plus infrastructure-as-code experience with Terraform or CloudFormation and CI/CD pipeline work using Jenkins, GitHub Actions, or similar.

Nice to have

• Familiarity with STIG/CIS hardening automation (e.g., Ansible, OpenSCAP).
• Experience with SIEM, log aggregation, and audit log retention in federal environments.
• Prior collaboration with 3PAOs, agency ISSOs/ISSMs, or the FedRAMP PMO.
• Relevant certifications such as AWS, CISSP, Security+, or CKA.
• Demonstrable use of AI-enabled tools to improve day-to-day efficiency and quality.

Benefits and work setup

• Base pay range of $155,584 to $199,012, with applications outside the range welcome.
• Competitive benefits package including medical, dental, vision, life, and disability coverage for eligible employees.
• Eligibility to participate in equity and/or variable bonus programs, a 401(k) plan with employer match, flexible paid time off, paid holidays, and paid parental leave.
• Async-first collaboration with a Central European Time-based team; confidentiality and data privacy protocols apply.