Senior Site Reliability Engineer (FedRAMP)

Nozomi Networks; Washington (District of Columbia); On-site; USD 156,000 - 199,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with employer match

Equity program

Flexible paid time off

Job summary

Nozomi Networks is seeking a Site Reliability Engineer to own the FedRAMP environment, ensuring its availability and continuous compliance. You will build cloud infrastructure, manage patching and remediation, and drive automated deployment and monitoring while collaborating with a global team and the Security & Compliance organization.

The role requires hands-on Kubernetes and AWS GovCloud experience, familiarity with vulnerability tooling, and IaC in Terraform or CloudFormation.

Qualifications

• US citizenship or lawful permanent residency, with work inside the United States
• Proven SRE/DevOps/Cloud经验 in FedRAMP, FISMA, DoD IL, or similar regulated env
• Autonomous worker with async communication in global teams
• Knowledge of NIST SP 800-53 controls and FedRAMP ConMon
• Hands-on Kubernetes experience
• Hands-on AWS, ideally AWS GovCloud (US)
• Experience with vulnerability tooling and remediation planning
• Programming in Ruby, Python, or Go
• Infrastructure as code using Terraform or CloudFormation
• CI/CD pipelines using Jenkins or GitHub Actions
• AI-enabled tools to improve efficiency while maintaining accountability

Responsibilities

• Own the FedRAMP environment's availability, performance, and continuous compliance
• Build and maintain cloud infrastructure within the FedRAMP boundary (AWS GovCloud)
• Own patching and vulnerability remediation lifecycle with SLAs and evidence
• Run and improve the Continuous Monitoring program and monthly deliverables
• Manage deployments and change control following CM processes
• Maintain system hardening against CIS/STIG benchmarks and FIPS encryption
• Automate deployment, patching, evidence collection, and operations
• Troubleshoot issues across network, OS, and applications
• Support compliance activities and audits (3PAO) with artifacts

Skills

Kubernetes

AWS GovCloud

FedRAMP

Vulnerability tooling

Terraform / CloudFormation

CI/CD pipelines

Python

Go

Ruby

Tools

Tenable/Nessus

Qualys

Job description

Now is an amazing time to join Nozomi Networks as we build the future of OT and IoT cybersecurity.

We defend some of the world’s largest organizations and critical infrastructure in more than 68 countries and we’re just getting started. Our AI-powered cybersecurity platform secures operational technology (OT) and Internet of Things (IoT) infrastructures for enterprises and government entities across energy, manufacturing, transportation, resources, and critical infrastructure.

As we expand our product portfolio and our footprint in the US public sector, our Engineeringdepartment is hiring a Site Reliability Engineer to take ownership of our FedRAMP-authorized environment. You will be the primary engineer responsible for the day-to-day reliability, securityposture, and compliance operations of this environment — including patching, deployment, andcontinuous monitoring (ConMon) — working closely with our Switzerland-based SRE team and ourSecurity & Compliance organization. This position carries a high degree of autonomy andresponsibility: you will be the primary owner of the FedRAMP environment and the outcomes itdepends on.

You could be the next "Nozomier"! If this sounds like you, read on.

In this role you will:

• Embode the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust
• Act as the primary owner of our FedRAMP environment, ensuring its availability, performance, andcontinuous compliance with the FedRAMP baseline
• Build and maintain the cloud infrastructure and related services within the FedRAMP authorizationboundary (AWS GovCloud)
• Own the patching and vulnerability remediation lifecycle, meeting FedRAMP remediation SLAs(30/90/180 days by severity) and maintaining associated evidence
• Execute and improve the Continuous Monitoring (ConMon) program: monthly vulnerabilityscanning, POA&M creation and tracking, deviation requests, and monthly deliverables to our3PAO and agency sponsors
• Manage deployments and change control within the boundary, ensuring changes follow theapproved Configuration Management process and Significant Change Request procedures where applicable
• Maintain system hardening against CIS/STIG benchmarks and FIPS-validated cryptographyrequirements
• Promote and implement automated solutions across application deployment, patching, evidence collection, and operational activities
• Troubleshoot issues across the entire stack, from network and OS to applications
• Support annual assessments and audits (3PAO), producing artifacts and demonstrating controlimplementation
• Drive post-incident analysis according to our no-blame culture, including incident reportingobligations to agency stakeholders and US-CERT/CISA where required
• Participate in periodic on-call duties for the FedRAMP environment
• Operate in settings with strong confidentiality and data privacy protocols

To be successful in this opportunity, you will have:

• US citizenship or lawful permanent residency, with all work performed from within the United States, and the ability to pass applicable background investigations (per FedRAMP and agency requirements)
• Proven professional experience as an SRE, DevOps, or Cloud engineer, including experienceoperating in a FedRAMP, FISMA, DoD IL, or similarly regulated environment
• Ability to work autonomously and communicate effectively in an async-first setup with a teambased in a different time zone (Central European Time)
• Working knowledge of NIST SP 800-53 controls and the FedRAMP continuous monitoring process(scanning, POA&Ms, deviation requests, annual assessments)
• Strong hands-on experience with Kubernetes
• Hands-on experience with AWS, ideally AWS GovCloud (US)
• Experience with vulnerability management tooling (e.g., Tenable/Nessus, Qualys) and interpretingscan results into actionable remediation plans
• Good knowledge and understanding of at least one programming language (Ruby, Python, Go)
• Experience defining infrastructure as code using tools such as Terraform or CloudFormation
• Experience in the definition of CI/CD pipelines using technologies like Jenkins, GitHub Actions, orsimilar
• Demonstrable experience using AI-enabled tools as part of day-to-day work to improve efficiency,quality, or decision-making, while applying sound professional judgement and maintaining accountability for outputs — within the constraints of a regulated environment

Nice to have

• Experience preparing for or maintaining a FedRAMP Authorization to Operate (ATO), includingSSP contributions and control narratives
• Familiarity with STIG/CIS hardening automation (e.g., Ansible, OpenSCAP)
• Familiarity with SIEM/log aggregation and audit log retention requirements in federal environments
• Experience working with 3PAOs, agency ISSOs/ISSMs, or the FedRAMP PMO
• Relevant certifications (e.g., AWS certifications, CISSP, Security+, CKA)

Nozomi Networks is committed to fair and equitable compensation practices. The base pay scale for this position is $155,584 - $199,012 . This is the range the company reasonably and in good faith expects to pay for the position taking into account factors including job-related knowledge, skillset, experience, education and training, certifications, and other relevant business factors. Applications outside the range are welcome to apply.

Additional Compensation and Benefits

• medical, dental, vision, life insurance, and disability insurance for eligible employees.
• eligible to participate in the company’s equity program and/or variable bonus program, subject to the rules governing such programs.
• eligible employees are able to enroll in a 401(k) plan along with the employer matching program.
• flexible paid time off, paid holidays and paid parental leave.

Our Global Benefits

• Health & Wellness
• Financial
• Work-Life Balance
• Unparalleled Flexible Time-Off

Need to know information

Successful candidates will be subjected to background verification checks.

Who we are and what we stand for:

Nozomi Networks is the leader in OT and IoT Cybersecurity. We protect the world's critical infrastructure, industrial and government organizations from cyber threats by providing exceptional network visibility, threat detection and operational insight. We’re always innovating and we hire the best at what they do to ensure our customers always have access to fast product enhancements, exceptional engineering support and rapid deployment across continents. If you like a challenge, and value integrity and customer success, we invite you to help Nozomi Networks build the future of OT and IoT cybersecurity.

Diversity, Inclusion and Belonging are part of our core beliefs, at Nozomi Networks. Diversity of thought, background and culture broadens our knowledge of the world and helps us learn, grow, and gain new perspectives. What makes us all different is what makes us powerful.

Nozomi Networks is committed to fair and equitable compensation practices. The base pay scale for this position is $155,584 - $199,012 . This is the range the company reasonably and in good faith expects to pay for the position taking into account factors including job-related knowledge, skillset, experience, education and training, certifications, and other relevant business factors. Applications outside the range are welcome to apply.