Staff Infra Security Engineer - FedRAMP GovCloud Lead

Jackalope Digital LLC; Northern (KY); Hybrid; USD 168,000 - 238,000; Full time

Job summary

GitLab is seeking a Staff Security Engineer for FedRAMP infrastructure security, leading the technical direction across the Federal platform and related SaaS offerings. You will drive secure by design practices, collaborate with partner teams, and guide security automation in a regulated environment.

You will mentor engineers, influence architecture decisions, and ensure compliance with NIST, FIPS, ISO, SOC 2, and PCI-DSS frameworks, while communicating clearly to leadership and assessors.

Qualifications

• Proof of U.S. citizenship and U.S. residency.
• Expert knowledge of cloud security across AWS/GCP/Azure.
• Deep FedRAMP understanding (Moderate/High).
• Proficiency in Go, Python, Ruby with security tooling experience.

Responsibilities

• Set technical direction and architectural patterns for FedRAMP infrastructure security.
• Own security posture of FedRAMP environment and supervise monitoring.
• Lead multi-quarter security initiatives to deliver measurable outcomes.
• Conduct threat modeling and security reviews of Federal infrastructure.

Skills

Cloud security

Kubernetes

FedRAMP knowledge

Programming (Go, Python, Ruby)

Infrastructure-as-Code

AI in security workflows

Security leadership

Communication

Tools

Terraform

Ansible

CloudFormation

AWS

GCP

Azure

Job description

GitLab is seeking a Staff Security Engineer for FedRAMP infrastructure security, leading the technical direction across the Federal platform and related SaaS offerings. You will drive secure by design practices, collaborate with partner teams, and guide security automation in a regulated environment.

You will mentor engineers, influence architecture decisions, and ensure compliance with NIST, FIPS, ISO, SOC 2, and PCI-DSS frameworks, while communicating clearly to leadership and assessors.