Senior Site Reliability Engineer (FedRAMP)

Description

The company secures operational technology and Internet of Things infrastructure for enterprises and government bodies in energy, manufacturing, transportation, resources and critical infrastructure, across more than 68 countries.

The company is expanding its product range and its presence in the US public sector, and the Engineering department is hiring a Site Reliability Engineer to take ownership of a FedRAMP-authorized environment.

You will be the primary engineer for the day-to-day reliability, security posture and compliance operations of this environment, including patching, deployment and continuous monitoring (ConMon).

You will work closely with the Switzerland-based SRE team and the Security & Compliance organization, with a high degree of autonomy and responsibility for the environment and the outcomes it depends on.

Responsibilities

• Embody the company's cultural pillars and its mission to protect what matters most with transparency and trust.
• Own the availability, performance and continuous compliance of the FedRAMP environment against the FedRAMP baseline.
• Build and maintain cloud infrastructure and related services inside the FedRAMP authorization boundary on AWS GovCloud.
• Own patching and vulnerability remediation, meeting FedRAMP remediation SLAs of 30, 90 and 180 days by severity, and keep the supporting evidence.
• Run and improve the ConMon program: monthly vulnerability scans, POA&M creation and tracking, deviation requests, and monthly deliverables to the 3PAO and agency sponsors.
• Manage deployments and change control within the boundary, following the approved Configuration Management process and, where applicable, Significant Change Request procedures.
• Keep systems hardened against CIS and STIG benchmarks and meet FIPS-validated cryptography requirements.
• Automate application deployment, patching, evidence collection and operational tasks.
• Troubleshoot problems across the full stack, from network and OS to applications.
• Support annual assessments and audits by 3PAOs, producing artifacts and showing how controls are implemented.
• Lead post-incident analysis in line with the company's no-blame culture, including reporting to agency stakeholders and US-CERT/CISA where required.
• Take part in periodic on-call duty for the FedRAMP environment.
• Work with strong confidentiality and data privacy protocols.

Requirements

• Proven experience as an SRE, DevOps or Cloud engineer, including work in a FedRAMP, FISMA, DoD IL or similarly regulated environment.
• Ability to work autonomously and communicate clearly in an async-first setup with a team in Central European Time.
• Working knowledge of NIST SP 800-53 controls and the FedRAMP continuous monitoring process, including scanning, POA&Ms, deviation requests and annual assessments.
• Strong hands-on Kubernetes experience.
• Experience with Prometheus, Grafana and Consul.
• Hands-on AWS experience, ideally on AWS GovCloud (US).
• Experience with vulnerability management tools such as Tenable/Nessus or Qualys, and turning scan results into actionable remediation plans.
• Good working knowledge of at least one of Ruby, Python or Go.
• Experience defining infrastructure as code with Terraform or CloudFormation.
• Experience defining CI/CD pipelines with Jenkins, GitHub Actions or similar.
• Demonstrated use of AI-enabled tools in daily work to improve efficiency, quality or decision-making, applying sound professional judgement and staying accountable for outputs within a regulated environment.
• Experience preparing for or maintaining a FedRAMP Authorization to Operate (ATO), including SSP contributions and control narratives.
• Familiarity with STIG/CIS hardening automation such as Ansible or OpenSCAP.
• Familiarity with SIEM, log aggregation and audit log retention requirements in federal environments.
• Experience working with 3PAOs, agency ISSOs/ISSMs or the FedRAMP PMO.
• Relevant certifications are a plus, such as AWS certifications, CISSP, Security+ or CKA.

Conditions

US citizenship or lawful permanent residency is required, with all work performed from within the United States and the ability to pass applicable background investigations under FedRAMP and agency rules.

The base pay range is $155,584 - $199,012. The company sets this range based on good-faith expectations, considering job-related knowledge, skills, experience, education, training, certifications and other business factors. Candidates outside the range may still apply.

Successful candidates will undergo background verification checks.

The company is an equal opportunity employer that values diversity of thought, background and culture.

Benefits

• Medical, dental, vision, life insurance and disability insurance for eligible employees.
• 401(k) plan with employer matching for eligible employees.
• Flexible paid time off, paid holidays and paid parental leave.
• Country-specific benefit packages covering health and wellness, financial support, work-life balance and flexible time off.