Senior DevOps Engineer (IL5 / FedRAMP High)
Keeper Security7 months ago
Remote, United StatesSenior
Responsibilities
- Design, implement, and manage IL5- and FedRAMP High-compliant infrastructure in AWS GovCloud and/or Azure Government.
- Automate infrastructure provisioning with Terraform and infrastructure-as-code practices.
- Build and maintain secure CI/CD pipelines that satisfy IL5 and FedRAMP High requirements.
- Collaborate with security and compliance teams on controls, monitoring, and reporting.
- Configure logging, alerting, and telemetry in restricted and hardened environments.
- Harden operating systems and container runtimes according to DISA STIGs, CIS benchmarks, and security best practices.
- Support secure secrets management, RBAC, ABAC, and audit logging.
- Participate in architecture discussions focused on scalability, resilience, and compliance.
- Assist with documentation, evidence collection, and remediation for ATO processes.
Requirements
- At least five years of experience in DevOps, SRE, or infrastructure engineering roles.
- Hands-on experience operating IL5- or FedRAMP High-compliant environments is required.
- Deep familiarity with AWS GovCloud and/or Azure Government.
- Strong experience with Terraform or similar infrastructure-as-code tooling.
- Proficiency in scripting and automation with Python, Bash, or similar languages.
- Experience building secure CI/CD workflows with tools such as GitHub Actions, Jenkins, or GitLab CI.
- Knowledge of STIG hardening, CIS benchmarks, and compliance automation.
- Understanding of zero-trust architectures and secure enclave design.
- Ability to collaborate with security, platform, and compliance stakeholders.
- Strong troubleshooting skills and sound judgment in high-pressure operational scenarios.
- Prior experience contributing to an ATO for a FedRAMP or DoD deployment is preferred.
- Experience running Kubernetes in high-compliance environments is preferred.
- Familiarity with HashiCorp Vault, AWS KMS, or similar secrets-management solutions is preferred.
- Exposure to vulnerability scanning, compliance drift detection, or SIEM integration is preferred.
Benefits
- 100% remote position, with a hybrid schedule option for candidates in the El Dorado Hills, California or Chicago, Illinois metro areas.
- Medical, dental, and vision insurance, including domestic partnerships.
- Employer-paid life insurance and supplemental life insurance options.
- Voluntary short- and long-term disability insurance.
- Roth or traditional 401(k).
- Generous paid time off, including paid bereavement and jury duty leave.
- Above-market annual bonuses.
Tech Stack
Categories
About Keeper Security
Keeper Security builds a cloud-based, zero-knowledge platform for password management, secrets management, privileged access management and secure remote connections for individuals and organizations. The privately held company, founded in 2011 and headquartered in Chicago, sells its KeeperPAM suite as subscription software, is published in 23 languages and sold in over 150 countries, and supports integrations with common identity providers and enterprise tech stacks.