Senior DevOps / Cloud Infrastructure Engineer
Core
Build the infrastructure and compliance foundation for a multi-tenant SaaS platform supporting space launch safety compliance, leading the path to FedRAMP and ISO 27001 certification.
Role type
Senior DevOps / Cloud Infrastructure Engineer (Security & Compliance)
Builds
Secure multi-tenant SaaS architecture on Google Cloud with FedRAMP-compliant controls and automated compliance evidence.
Domain
Aerospace / Defense / Government Contracting (Space Launch Safety)
Required skills
Google Cloud (GCP), Terraform, Kubernetes/GKE, Docker, GitLab CI/CD, Python, Go, Bash, TypeScript, IAM, Encryption, Key Management, Networking, Postgres, Disaster Recovery, Incident Response, Security Monitoring, SIEM Integration, Vulnerability Management, Policy-as-Code, Drift Detection, SBOMs, Container Scanning
Preferred skills
FedRAMP authorization experience, NIST SP 800-53 controls, 3PAOs, OSCAL, automated compliance platforms, SOC 2, StateRAMP/GovRAMP, CMMC, DoD Impact Levels IL4/IL5, Google Cloud Assured Workloads, ITAR, export-controlled data, Node.js, pnpm monorepo tooling, security certifications, early-stage startup experience
Technologies
Bash, CI/CD, Cloud, DevOps, Docker, GCP, GitLab, IAM, Kubernetes, Network, pnpm, Phoenix, Python, Security, Terraform, TypeScript, NodeJS, REST
Responsibilities
Lead technical delivery of FedRAMP 20x Class C authorization including defining system boundaries and implementing Google Cloud controls. Implement and maintain infrastructure controls for ISO 27001 ISMS and support internal and external audits. Design secure multi-tenant isolation including network segmentation, tenant data separation, encryption, and key management. Build and manage infrastructure as code with Terraform, policy-as-code guardrails, and drift detection. Strengthen and extend GitLab CI/CD pipelines with security testing, dependency and container scanning, image signing, SBOMs, and gated environment promotion. Own observability and security monitoring including centralized logging, audit trails, alerting, and SIEM integration. Manage vulnerability remediation and patching to FedRAMP timelines and track findings through POA&Ms. Define and test backup, disaster recovery, and incident response procedures. Manage least-privilege IAM including privileged access, service accounts, and access reviews. Partner with engineering to establish secure defaults and document architecture and runbooks.
Seniority
Senior, hands-on IC
