DevOps Lead (FedRAMP)

Orca Security

7d • $230,000 - $260,000 • Remote

About The Position

The DevOps Lead (FedRAMP) will own Orca's FedRAMP environment, including its infrastructure, authorization, and relationships with agencies and assessors. This is a senior engineering role with significant authority, responsible for setting and implementing technical direction within the federal environment. The role involves building and operating the environment, designing automation for compliance, managing production health, and owning the FedRAMP program lifecycle. Additionally, the position requires representing Orca to federal customers and translating technical requirements between different teams. The ideal candidate is hands-on, experienced in FedRAMP systems, and comfortable working with a global R&D organization.

Requirements

• Hands-on experience writing infrastructure code and operating production systems.
• Real experience within a FedRAMP authorized system, including understanding authorization boundaries, significant changes, and 3PAO requirements.
• 5 or more years in DevOps, SRE, or cloud infrastructure with genuine production ownership.
• Deep AWS experience, including hands-on AWS GovCloud and understanding its differences from commercial AWS.
• Experience operating, debugging, and upgrading Kubernetes in production.
• 3 or more years of experience with Terraform and infrastructure as code at scale.
• Automation experience in Python or an equivalent language.
• Fluency in NIST SP 800-53 Rev 5, with the ability to connect controls to technical implementations.
• Vulnerability management experience in a regulated environment.
• Ability to conduct technical conversations with federal customer security teams.
• Excellent written and spoken English.
• Based in the United States with access to the authorized environment subject to federal personnel screening requirements.
• Comfortable working with an Israel-based R&D organization with meaningful overlap with Israel hours.

Nice To Haves

• Experience with the FedRAMP 20x pathway, OSCAL tooling, or KSI based validation.
• Exposure to DoD IL4 or IL5, StateRAMP, CMMC, or IRAP.
• Experience growing a small infrastructure team.
• Experience with compliance automation tooling such as Xacta, Paramify, RegScale, or Vanta.
• Background at a security product company or with a cloud-native security platform.
• Bachelor's degree in Computer Science or Computer Engineering, or equivalent hands-on experience.

Responsibilities

• Build and operate the federal environment, including infrastructure, EKS, Terraform, Helm, CI/CD, FIPS validated endpoints, hardened images, secrets management, and centralized logging across AWS GovCloud, AWS East/West, Azure Government, Azure Commercial, and GCP.
• Write infrastructure code and set standards for its implementation.
• Design automation for continuous configuration validation, drift detection, evidence collection, and inventory accuracy to make compliance a byproduct of system operation.
• Manage the integration of new platform capabilities into the federal environment.
• Own production health, monitoring, and incident response for the federal environment.
• Run continuous monitoring, including scanning, POA&M, inventory, and reporting.
• Own authorization artifacts, including SSP and boundary diagrams, and lead their transition to OSCAL.
• Assess and categorize changes to the boundary and manage the associated notification process.
• Lead annual assessments and 3PAO engagements, from scoping to closing findings.
• Serve as Orca's interface to the FedRAMP PMO, agency sponsor, and assessors.
• Track program direction and communicate implications to the company.
• Act as the technical voice for the federal environment in discussions with agency security teams, prime contractors, and prospects.
• Collaborate with federal sales, sales engineering, and customer success teams.
• Translate requirements between agency ISSOs and R&D teams.

Benefits

• Competitive salary and equity package
• Discounted medical, dental, and vision benefits with significant employer contribution
• Benefits coverage starting on your first day of employment
• Generous PTO with U.S. holidays observed
• Flexible hybrid & remote work environments
• Your choice of Mac or Windows laptop
• Work-from-home stipend to be used in your first month of employment
• Monthly reimbursement for cell phone and home internet

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree