DevOps Lead (FedRAMP)

Join Orca Security as a DevOps Lead (FedRAMP) and take ownership of our FedRAMP environment. This is a builder's role with real authority, where you will set the technical direction and implement it yourself. You will work closely with federal sales, sales engineering, and customer success teams, and be the technical voice of our federal environment in front of agency security teams, prime contractors, and prospects.

• Posséder et faire évoluer l'environnement FedRAMP d'Orca dans AWS GovCloud, AWS East/West, Azure Government, Azure Commercial et GCP.
• Écrire le code d'infrastructure vous-même et établir les normes pour la manière dont il est écrit.
• Concevoir l'automatisation qui fait de la conformité un sous-produit du fonctionnement du système, couvrant la validation continue de la configuration, la détection des dérives, la collecte de preuves et l'exactitude de l'inventaire.

• If you like being the definitive expert on a system that matters, and you want the ownership without giving up the engineering, this is a rare shape of role
• Fluency in NIST SP 800-53 Rev 5. You can move between a control and its real technical implementation in either direction
• Kubernetes in production. Operating it, debugging it, and upgrading it
• The presence to hold a technical conversation with a federal customer’s security team and be the reason they trust the answer. Excellent written and spoken English
• You are hands on today and you want to stay that way. You are writing infrastructure code and operating production systems now, and you would be doing roughly two thirds of that in this role alongside the ownership and customer work
• 5 or more years in DevOps, SRE, or cloud infrastructure, with genuine production ownership
• Based in the United States, with access to the authorized environment subject to our federal personnel screening requirements
• Automation in Python or an equivalent language, with an instinct to script what others do by hand
• Real experience inside a FedRAMP authorized system. You can talk about an authorization boundary, a significant change, or what a 3PAO will ask for, from having done it
• Vulnerability management experience in a regulated environment
• Deep AWS experience, including hands on AWS GovCloud and a clear understanding of how it differs from commercial
• Comfortable working with an Israel based R&D organization, with meaningful overlap with Israel hours
• Terraform and infrastructure as code at scale, 3 or more years
• Exposure to DoD IL4 or IL5, StateRAMP, CMMC, or IRAP
• Experience with the FedRAMP 20x pathway, OSCAL tooling, or KSI based validation
• Experience growing a small infrastructure team
• Background at a security product company or with a cloud native security platform
• Compliance automation tooling such as Xacta, Paramify, RegScale, or Vanta
• Bachelor’s degree in Computer Science or Computer Engineering, or equivalent hands on experience