Senior Site Reliability Engineer (FedRAMP)
Nozomi Networks2 months ago
Base Salary
$156k - $199k/yr
Responsibilities
- Own the availability, performance, security posture, and continuous compliance of the FedRAMP-authorized environment.
- Build and maintain cloud infrastructure and related services within the AWS GovCloud authorization boundary.
- Manage patching, vulnerability remediation, remediation SLAs, and associated evidence.
- Execute and improve Continuous Monitoring activities, including vulnerability scanning, POA&Ms, deviation requests, and monthly deliverables.
- Manage deployments, change control, Configuration Management processes, and Significant Change Requests.
- Maintain CIS/STIG hardening and FIPS-validated cryptography requirements.
- Automate application deployment, patching, evidence collection, and operational activities.
- Troubleshoot issues across network, operating system, and application layers.
- Support 3PAO assessments and audits by producing artifacts and demonstrating control implementation.
- Conduct post-incident analysis, required reporting, and periodic on-call support for the FedRAMP environment.
Requirements
- US citizenship or lawful permanent residency, work performed from within the United States, and ability to pass applicable background investigations.
- Professional SRE, DevOps, or cloud engineering experience in a FedRAMP, FISMA, DoD IL, or similarly regulated environment.
- Working knowledge of NIST SP 800-53 controls and the FedRAMP continuous monitoring process.
- Strong hands-on Kubernetes experience and hands-on AWS experience, ideally AWS GovCloud.
- Experience with vulnerability management tools such as Tenable/Nessus or Qualys.
- Good knowledge of at least one programming language: Ruby, Python, or Go.
- Experience defining infrastructure as code with Terraform or CloudFormation.
- Experience defining CI/CD pipelines with Jenkins, GitHub Actions, or similar technologies.
- Demonstrable experience using AI-enabled tools responsibly in day-to-day work within regulated-environment constraints.
- Preferred qualifications include FedRAMP ATO preparation or maintenance, SSP and control narrative contributions, STIG/CIS hardening automation, SIEM or log aggregation experience, collaboration with 3PAOs or federal stakeholders, and certifications such as AWS certifications, CISSP, Security+, or CKA.
Benefits
- Medical, dental, vision, life insurance, and disability insurance for eligible employees.
- Eligibility for equity and/or variable bonus programs, subject to applicable program rules.
- 401(k) plan with employer matching for eligible employees.
- Flexible paid time off, paid holidays, and paid parental leave for eligible employees.
- Flexible country-customized benefits covering health and wellness, financial benefits, and work-life balance.
Tech Stack
Categories
DevOpsSite Reliability
About Nozomi Networks
Nozomi Networks builds OT/IoT cybersecurity software that provides network and endpoint visibility, threat detection, and incident response for critical infrastructure, industrial, and government operators. Its offerings include a SaaS-based platform and on-premise sensors and appliances sold to enterprises via subscriptions and services. Founded in 2013 and headquartered in San Francisco, it operates globally and is owned by Mitsubishi Electric.