{bc}
greenhouse

Site Reliability Engineer

BeyondTrust
Remote, USA
Mid
Remote
Discovered 2 weeks ago
awsgrafanakubernetesterraform

Full Job Posting

What You’ll Do

  • Build and operate AWS GovCloud environments: multi-account structure, guardrails, logging and security tooling, IaC-native provisioning (Terraform)
  • Build and run release and update machinery for cloud fleets: mandatory security updates, staged and jittered rollout windows, coordinated installs, and verification that a patch actually landed everywhere it was scoped to
  • Build the continuous-compliance evidence pipeline: collection, normalization, and reporting of FedRAMP 20x Key Security Indicators, where evidence is machine-readable, re-verified every few days, and reported monthly
  • Instrument production: telemetry, SLOs, dashboards, and alerting that the team and product engineering actually own and act on
  • Consolidate CI/CD: shared pipelines for build, signing, artifact management, quality gates, and security scanning instead of per-team reinvention
  • Participate in on-call for the GovCloud estate, with the explicit expectation that recurring incident causes get engineered away

What You’ll Bring

  • Build and operate AWS GovCloud environments: multi-account structure, guardrails, logging and security tooling, IaC-native provisioning (Terraform)
  • Build and run release and update machinery for cloud fleets: mandatory security updates, staged and jittered rollout windows, coordinated installs, and verification that a patch actually landed everywhere it was scoped to
  • Build the continuous-compliance evidence pipeline: collection, normalization, and reporting of FedRAMP 20x Key Security Indicators, where evidence is machine-readable, re-verified every few days, and reported monthly
  • Instrument production: telemetry, SLOs, dashboards, and alerting that the team and product engineering actually own and act on
  • Consolidate CI/CD: shared pipelines for build, signing, artifact management, quality gates, and security scanning instead of per-team reinvention
  • Built or operated inside a FedRAMP Moderate or High boundary (or IL4/IL5, StateRAMP equivalent): continuous monitoring, POA&M lifecycle, patch SLAs, 3PAO engagement
  • AWS GovCloud specifically; multi-account landing zones; FIPS endpoints and crypto modes
  • VM fleet or appliance-model operations at scale, not only Kubernetes
  • Telemetry and data pipeline ownership (OTEL, Grafana-class stacks)
  • Compliance-as-code and evidence automation (OSCAL, machine-readable ConMon, AWS Config rules or OPA at scale)
  • Test and verification engineering: building the harnesses that prove a fleet is in the state the paperwork says it isParticipate in on-call for the GovCloud estate, with the explicit expectation that recurring incident causes get engineered away
  • Working Details
  • Location: US-based, remote. This role works inside a FedRAMP boundary; standard US-person requirements for federal environments apply.
  • Reports to the SRE Manager, within the VP of Application Engineering’s organization.
  • Better Together
  • Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.
  • We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at BeyondTrust