Site Reliability Engineer - Vulnerability

Astreya•Remote, TX, TX

2d•$114,000 - $180,000

About The Position

The Site Reliability Engineer will support vulnerability management for the FedRAMP cloud platform, owning findings from intake through validated remediation and closure. The role triages and prioritizes host, OS-package, container, base-image, and application-dependency findings; identifies the source of vulnerable software and the appropriate remediation; and implements or coordinates fixes through infrastructure automation, CI/CD, package managers, container builds, artifact repositories, and federal promotion workflows. The engineer validates fixes through package versions, build artifacts, image manifests, deployed-host evidence, and scanner rescans, while maintaining ticket evidence, ownership, escalation, exception rationale, backlog metrics, runbooks, automation, and knowledge transfer. As part of the SRE Compliance & Security Initiatives team, the engineer develops and maintains automation to improve the reliability, scalability, security, and operational efficiency of FedRAMP infrastructure and processes. The role enhances deployment pipelines, testing frameworks, and operational tooling; troubleshoots complex infrastructure and distributed-systems issues; and helps teams adapt infrastructure, applications, and processes to FedRAMP controls. The engineer also contributes to deployment-process refactoring and new cluster build-outs, reduces manual work through repeatable automation, and partners with engineering, product, and business teams across time zones. Success includes reducing the overdue vulnerability backlog, improving ownership and evidence quality, delivering reusable automation and runbooks, and transferring a sustainable process to the CSI team.

Requirements

At least 5 years of experience in Site Reliability Engineering, DevOps, Infrastructure Engineering, or a related role supporting cloud-based production environments.
Practical vulnerability-management experience and familiarity with Qualys, JFrog Xray, SCA/SBOM, or equivalent tools.
Knowledge of dependency management for Ruby/Bundler, Python/pip, and Go modules, including direct versus transitive dependencies, version constraints, lockfiles, go.mod/go.sum, and verifying effective versions in built artifacts.
Experience developing and maintaining infrastructure automation using Ansible.
Experience administering and troubleshooting Linux-based systems and distributed infrastructure environments.
Experience designing, implementing, and maintaining CI/CD pipelines, including GitLab CI.
Experience supporting large-scale infrastructure environments consisting of hundreds or thousands of systems.
Availability to be online from 9 a.m. to 4 p.m. PST.

Nice To Haves

Familiarity with AWS or other public cloud platforms and hybrid infrastructure environments.
Knowledge of monitoring, observability, and reliability engineering practices and tooling.
Familiarity with Kubernetes concepts and containerized application platforms.
Experience using AI-assisted development tools to improve software development, automation, operational analysis, and engineering productivity.
Experience managing fleet-wide software deployments.
Experience providing incident support and triage.

Responsibilities

Own FedRAMP vulnerability findings from intake through validated remediation and closure.
Triage and prioritize host, OS-package, container, base-image, and application-dependency findings based on exploitability, asset criticality, and remediation timelines.
Identify vulnerable software sources and determine appropriate actions, including dependency updates, image rebuilds, promotions, host changes, deviations, false-positive corrections, or ticket cleanup.
Implement or coordinate fixes using Ansible, GitLab CI, package managers, container builds, Artifactory, and federal promotion-train workflows.
Validate fixes using effective package versions, build artifacts, image manifests, deployed-host evidence, and scanner rescans before resolving vulnerability tickets.
Maintain Jira evidence, ownership, due-date escalation, exception rationale, backlog metrics, runbooks, automation, and knowledge transfer.
Develop and maintain automation that improves the reliability, scalability, security, and operational efficiency of FedRAMP cloud infrastructure and processes.
Design and enhance deployment pipelines, testing frameworks, and operational tooling.
Troubleshoot complex infrastructure and distributed-systems issues to support high availability and FedRAMP compliance.
Contribute to deployment-process refactoring and new cluster build-outs, reducing manual toil and enabling rapid, repeatable processes.
Partner with engineering, product management, and business teams to understand platform dependencies and deliver reliability and performance improvements.

Benefits

Medical coverage through UHC (PPO, HSA, and Surest options) or Kaiser (HMO option for California employees only).
Dental insurance through UHC.
Vision insurance through UHC.
Flexible Spending Account for health and dependent care.
Pre-tax commuter benefit for parking and transit, depending on location.
Continuing education and professional development through platforms such as Udemy and Coursera.
Corporate wellness program.
Employee Assistance Program.
Wellness Days.
401(k) plan.
Basic and supplemental life insurance.
Short-term and long-term disability insurance.
Critical illness, critical hospital, and voluntary accident insurance.
Tuition reimbursement, available six months after start date and subject to a cap.
Paid time off, accrued and prorated, up to 120 hours annually.
Paid holidays.
Applicable statutory leaves, paid time, and other ancillary benefits required under state and federal law.