Senior DevOps Engineer, Security & Compliance

Zafran.io•New York, NY

3d•Remote

About The Position

Zafran is looking for a Senior DevOps Engineer with a strong security and compliance background to lead our compliance posture and prepare us for FedRAMP. You will work on hardening our infrastructure, implementing the controls required for regulated customers, and building the evidence and automation needed to achieve and maintain compliance certifications. This role partners closely with our Security team and Tel Aviv DevOps team. About Zafran Our Mission: To stop the exploitations of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and uses your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. Who’s behind us: Zafran is backed by Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way!

Requirements

Must be located in the US, with a strong preference for the New York area; US remote considered
U.S. citizenship or lawful permanent resident status (Green Card) required due to FedRAMP-related eligibility requirements and access to a U.S.-only environment.
5+ years of DevOps / platform engineering experience with a strong security focus
Direct experience implementing controls for SOC 2, ISO 27001, HIPAA, PCI, or FedRAMP
Deep AWS security knowledge: IAM, KMS, GuardDuty, Security Hub, VPC design, Config
Strong Kubernetes security experience: network policies, admission control, runtime security
Infrastructure as Code with Terraform, with a focus on policy-as-code
CI/CD security: SAST, DAST, SCA, image scanning, supply chain hardening
Solid scripting in Python or Bash

Nice To Haves

Prior experience leading or mentoring a small team
Direct hands-on experience with a FedRAMP Moderate or High authorization
Experience with GovCloud (AWS US-East/West GovCloud regions)
Relevant certifications (AWS Security Specialty, CISSP, CCSP)

Responsibilities

Lead the technical work to achieve and maintain compliance certifications (SOC 2, ISO 27001, and the upcoming FedRAMP process)
Design and implement security controls across AWS infrastructure, CI/CD pipelines, Kubernetes, and application deployments
Build the automation, logging, and evidence collection required for continuous compliance
Implement and maintain secrets management, IAM hardening, network segmentation, and encryption standards
Develop infrastructure solutions for customers in highly regulated industries, including isolated or dedicated environments
Collaborate with security, legal, and engineering on threat modeling, vulnerability management, and incident response
Stay ahead of FedRAMP, FISMA, and related federal requirements and translate them into concrete engineering work