Staff Infra Security Engineer - FedRAMP Leader (Remote)

GitLab Inc.; Northern (KY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

GitLab is seeking a Staff Infrastructure Security Engineer (USA) to lead the security of our FedRAMP infrastructure and government-focused offerings. You will define patterns, drive secure architecture, and collaborate with engineering teams to embed strong controls across GitLab Dedicated and other SaaS platforms.

The role requires deep FedRAMP knowledge, multi-cloud expertise (AWS/GCP/Azure), Kubernetes, IaC tools, and hands-on security tooling.

Qualifications

• Security engineering experience for cloud infrastructure (AWS/GCP/Azure).
• Deep FedRAMP knowledge (Moderate/High) and accreditation processes.
• Proficiency in Go, Python, Ruby with security tooling delivery.
• Experience with Infrastructure-as-Code security (Terraform, Ansible, CloudFormation) and policy-as-code.
• Hands-on AI-assisted security workflows in compliance-constrained environments.
• Excellent communication with technical and leadership audiences.

Responsibilities

• Define technical direction and patterns for infrastructure security in FedRAMP.
• Lead security posture for FedRAMP environment and coordinate with Public Sector SRE.
• Drive multi-quarter initiatives into executable streams with measurable outcomes.
• Conduct security reviews and threat modeling for Federal infrastructure.
• Mentor engineers and influence cross-team adoption of secure patterns.
• Communicate tradeoffs to executives and assessors.

Skills

Go

Python

Ruby

Kubernetes

AWS

GCP

Azure

Security engineering

AI in security

Leadership

Tools

Terraform

Ansible

CloudFormation

FedRAMP tooling

CI/CD tooling

Job description

GitLab is seeking a Staff Infrastructure Security Engineer (USA) to lead the security of our FedRAMP infrastructure and government-focused offerings. You will define patterns, drive secure architecture, and collaborate with engineering teams to embed strong controls across GitLab Dedicated and other SaaS platforms.

The role requires deep FedRAMP knowledge, multi-cloud expertise (AWS/GCP/Azure), Kubernetes, IaC tools, and hands-on security tooling.