DevOps Lead (FedRAMP)

Orca Security

12d • $210,000 - $230,000 • Remote

About The Position

Orca is seeking a driven and talented DevOps Lead with FedRAMP experience to own and manage the company's FedRAMP environment. This is a senior engineering role with significant authority, responsible for the infrastructure, authorization, and relationships with agencies and assessors. The ideal candidate will be a builder who can set and implement technical direction, design automation for compliance, and manage production health. This role also involves owning the FedRAMP program, including continuous monitoring, authorization artifacts, and leading assessments. Additionally, the position requires representing Orca to federal customers, acting as the technical voice in security reviews and audit responses, and translating requirements between agencies and the R&D team.

Requirements

• Hands-on experience writing infrastructure code and operating production systems.
• Real-world experience within a FedRAMP authorized system, including understanding authorization boundaries, significant changes, and 3PAO requirements.
• 3+ years in DevOps, SRE, or cloud infrastructure with genuine production ownership.
• Deep AWS experience, including hands-on AWS GovCloud and understanding its differences from commercial AWS.
• Experience operating, debugging, and upgrading Kubernetes in production.
• 3+ years of experience with Terraform and infrastructure as code at scale.
• Automation experience in Python or an equivalent language.
• Fluency in NIST SP 800-53 Rev 5, with the ability to connect controls to their technical implementations.
• Vulnerability management experience in a regulated environment.
• Ability to conduct technical conversations with federal customer security teams.
• Excellent written and spoken English.
• Based in the United States with access to the authorized environment, subject to federal personnel screening.
• Comfortable working with an Israel-based R&D organization with meaningful overlap in working hours.

Nice To Haves

• Experience with the FedRAMP 20x pathway, OSCAL tooling, or KSI based validation.
• Exposure to DoD IL4 or IL5, StateRAMP, CMMC, or IRAP.
• Experience growing a small infrastructure team.
• Experience with compliance automation tooling such as Xacta, Paramify, RegScale, or Vanta.
• Background at a security product company or with a cloud-native security platform.
• Bachelor's degree in Computer Science or Computer Engineering, or equivalent hands-on experience.

Responsibilities

• Build and operate the federal environment, including infrastructure, EKS, Terraform, Helm, CI/CD, FIPS validated endpoints, hardened images, secrets management, and centralized logging across AWS GovCloud, AWS East/West, Azure Government, Azure Commercial, and GCP.
• Write infrastructure code and set standards for its implementation.
• Design automation for continuous configuration validation, drift detection, evidence collection, and inventory accuracy to make compliance a byproduct of system operation.
• Manage the integration of new platform capabilities into the federal environment.
• Own production health, monitoring, and incident response for the federal environment.
• Run continuous monitoring end-to-end, including scanning, POA&M, inventory, and reporting.
• Own authorization artifacts (SSP, boundary diagrams, control implementation) and lead their transition to OSCAL.
• Assess and categorize changes to the boundary and manage the associated notification process.
• Lead annual assessment and 3PAO engagements, from scoping to closing findings.
• Serve as Orca's interface to the FedRAMP PMO, agency sponsor, and assessors.
• Track the evolution of the FedRAMP program and communicate its implications to Orca.
• Act as the technical voice of the federal environment in discussions with agency security teams, prime contractors, and prospects.
• Collaborate with federal sales, sales engineering, and customer success teams to win accounts with credible technical answers.
• Translate requirements between agency ISSOs and the R&D team to ensure buildable specifications.

Benefits

• Competitive salary and equity package
• Discounted medical, dental, and vision benefits with significant employer contribution
• Benefits coverage starting on your first day of employment
• Generous PTO with U.S. holidays observed
• Flexible hybrid & remote work environments
• Choice of Mac or Windows laptop
• Work-from-home stipend
• Monthly reimbursement for cell phone and home internet

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree