Principal DevOps Engineer

Evolv Technologies Holdings•Waltham, MA

2d•Hybrid

About The Position

Evolv is seeking a Principal DevOps Engineer to design, operate, and continuously improve cloud infrastructure that meets federal security and compliance requirements. In this role, you will partner closely with Platform, Security, Compliance, and Engineering teams to enable reliable, audit-ready cloud environments while balancing velocity, security, and operational excellence. The role involves driving day-to-day operations of FedRAMP-aligned cloud environments, implementing and maintaining technical controls, assisting with evidence collection, validation, and operational documentation, and identifying gaps, risks, or inefficiencies to propose remediation or automation opportunities. By the end of the first year, you will be a trusted technical owner for FedRAMP cloud infrastructure and compliance operations, help maintain audit-ready systems through continuous monitoring and evidence generation, reduce manual compliance effort through automation and repeatable infrastructure patterns, and influence cloud and platform decisions with a security-first, reliability-focused mindset.

Requirements

U.S. Citizen or Green-card holder
5+ years of experience in cloud engineering, DevOps, or platform operations roles.
Hands-on experience operating AWS environments.
Experience working in compliance-driven or regulated environments.
Strong understanding of Linux, networking, IAM, and cloud security fundamentals.
Experience using Infrastructure as Code and automation tools.
Clear communication skills and the ability to work cross-functionally.

Nice To Haves

Direct experience supporting FedRAMP Moderate or High environments.
Familiarity with NIST 800-53 control families and evidence collection.
Experience supporting CI/CD pipelines and security tooling.
Cloud or security certifications (AWS or security-focused certifications).

Responsibilities

Design, deploy, and operate AWS cloud infrastructure in FedRAMP-authorized environments.
Implement and maintain Infrastructure as Code for secure and repeatable deployments.
Support DevSecOps pipelines with security controls, logging, and policy enforcement.
Partner with Security and Compliance teams during audits, assessments, and Plan of Action & Milestone activities.
Manage logging, monitoring, vulnerability management, and incident response workflows.
Document architectures, operational processes, and compliance evidence clearly and consistently.
Collaborate across teams to improve reliability, security posture, and operational maturity.