Senior Federal Platform Engineer
Keeper Security2 months ago
Remote, United StatesSenior
Responsibilities
- Build, maintain, and improve CI/CD pipelines and automated deployment workflows for federal environments.
- Support releases, deployment execution, cutovers, validation, rollback planning, and post-release monitoring across IL5, IL6, and classified networks.
- Automate infrastructure provisioning and configuration using infrastructure-as-code tools.
- Maintain hardened infrastructure, configuration baselines, patching processes, and operational controls.
- Troubleshoot deployment, infrastructure, application, and platform issues with Engineering and Security teams.
- Build and maintain logging, monitoring, alerting, and operational telemetry.
- Support incident response, recovery, postmortems, and corrective actions.
- Partner with Engineering, QA, Security, and Product teams to improve deployment readiness and release quality.
- Maintain runbooks, deployment documentation, operational procedures, and configuration records.
- Support continuous monitoring, audit readiness, and authorization activities by producing technical evidence and artifacts.
- Assist with vulnerability remediation, security hardening, compliance drift detection, and system configuration validation.
- Use AI-assisted tools such as Claude, ChatGPT, and GitHub Copilot to improve automation, troubleshooting, documentation, scripting, and operational efficiency.
Requirements
- 7+ years of experience in DevOps, platform engineering, SRE, release engineering, infrastructure engineering, or a related technical role.
- Hands-on experience deploying and operating systems in IL5, IL6, FedRAMP High, classified, or similarly restricted government environments.
- Strong experience with CI/CD pipelines, release automation, deployment workflows, and production change management.
- Strong experience with Terraform, CloudFormation, Ansible, or similar infrastructure-as-code tools.
- Experience with AWS GovCloud and/or Azure Government.
- Proficiency in Python, Bash, PowerShell, or similar scripting languages.
- Understanding of secure configuration, patching, logging, access control, and operational hardening practices.
- Experience with observability, production troubleshooting, and diagnosing issues across infrastructure, applications, networking, and deployment pipelines.
- Familiarity with FedRAMP, NIST 800-53, RMF, DoD Cloud Computing SRG, and related operational controls.
- Experience working under strict change control, limited access, and formal release processes.
- Ability and willingness to use AI-assisted tools for scripting, automation, troubleshooting, documentation, and operational analysis.
- Ability to obtain and maintain a Top Secret clearance.
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
- All applicants must be a U.S. Person.
- Preferred qualifications include IL6 or classified deployment experience, Kubernetes or containerized workload operations, DISA STIGs, CIS benchmarks, secrets management, PAM, IAM, zero-trust architectures, continuous monitoring, vulnerability management, audit evidence collection, and direct government or mission-partner experience.
Benefits
- 100% remote position with travel as needed
- Medical, dental, and vision insurance, including domestic partnerships
- Employer-paid life insurance and supplemental life insurance options
- Voluntary short- and long-term disability insurance
- Roth and traditional 401(k) plans
- Generous PTO, including paid bereavement and jury duty leave
- Above-market annual bonuses
Tech Stack
Categories
DevOpsSite Reliability
About Keeper Security
Keeper Security builds a cloud-based, zero-knowledge platform for password management, secrets management, privileged access management and secure remote connections for individuals and organizations. The privately held company, founded in 2011 and headquartered in Chicago, sells its KeeperPAM suite as subscription software, is published in 23 languages and sold in over 150 countries, and supports integrations with common identity providers and enterprise tech stacks.