13 hours ago
Base Salary
$144k - $180k/yr
Responsibilities
- Own production CI/CD pipelines, build integrity, SLSA artifact signing, and least-privilege pipeline credentials across teams.
- Design secure cloud landing zones and golden-path patterns for AWS GovCloud and Azure GCC High using Zero Trust principles.
- Secure the software supply chain through dependency scanning, secret detection, SBOM generation, provenance verification, and pinned build actions.
- Harden container and orchestration layers from base image selection through Kyverno and OPA Gatekeeper admission policies.
- Translate NIST 800-53, CMMC, FedRAMP, and DISA CC SRG frameworks into automated technical checks and pipeline gates.
- Threat model distributed systems and implement mitigations, guardrails, and AI-driven security tooling.
- Build continuous evidence collection from cloud APIs, CI/CD runners, and scanner feeds, and maintain real-time POA&M status.
- Author control implementation statements and inherited-versus-owned authorization boundaries for assessor review.
- Drive Continuous RMF and cATO practices and implement unified controls spanning NIST 800-53, SOC 2, and ISO 27001.
- Train, mentor, and support the growth of security engineers across the practice.
Requirements
- 6–10 years of experience in cloud/platform operations, DevSecOps, or security engineering.
- Deep hands-on knowledge of the security surfaces and insecure defaults of AWS GovCloud and Azure GCC High.
- Experience building and hardening production CI/CD platforms rather than merely consuming them.
- Terraform experience as the standard method for managing infrastructure and security controls.
- Direct production experience applying NIST 800-53, FedRAMP, or CMMC controls.
- Strong programming ability in Python, Go, or Rust to build security tools, admission controllers, and evidence pipelines.
- Ability to communicate control requirements to developers and control satisfaction to assessors.
- U.S. citizenship and successful completion of a background investigation are required.
- Preferred experience includes carrying an ATO or cATO package, SSP authoring, POA&M management, continuous monitoring, federal agency environments, DoD Software Factory environments, IL4/IL5/IL6 requirements, or GRC engineering.
- No certification is required to interview or receive an offer; customer engagements may require an approved DoD 8140/8570 baseline certification.
Benefits
- Flexible schedule in a 100% distributed workforce.
- Employer-paid employee health premiums up to 100% and dependent health premiums up to 80%, with employee and dependent dental and vision coverage and employee life and disability coverage.
- 401(k) match at 10% of gross pay.
- Four weeks of combined accrued vacation and sick leave, 11 federal holidays, birthday leave, jury duty, and bereavement leave.
- Up to $3,500 per year for education and training.
- $750 per year for home office technology and equipment and $100 per year for company merchandise.
- Wellness reimbursement of up to $500 per calendar year or an optional $75 monthly Life Time membership credit.
- MacBook Pro provided.
- Position may require up to 25% travel for contract performance, customer site visits, and program activities.
- Rise8 will support and sponsor required baseline certification training for candidates assigned to a billable role that mandates it.
About Rise8
Rise8 builds custom, secure software and cloud platforms for U.S. government and other high-compliance enterprises, delivered via agile product teams and DevSecOps consulting. Founded in 2019 and headquartered in Tampa, the privately held, Service-Disabled Veteran-Owned Small Business works on federal programs requiring U.S. citizenship and focuses on continuous ATO and user-centered design.