Sr Manager, Site Reliability Engineer (FedRAMP / AWS GovCloud)

BeyondTrust

About The Position

BeyondTrust is seeking a Sr. Manager, Site Reliability Engineer to lead a new cross-product SRE team. This role will be responsible for establishing and managing AWS GovCloud environments for BeyondTrust products to achieve FedRAMP authorization. The SRE Manager will own the reliability, change control, and continuous compliance processes for these environments, enabling product feature teams to focus on product delivery. This is a player-coach role requiring both deep technical expertise in areas like Terraform and pipeline definitions, and proven people management experience, including hiring, growing, and leading SRE or DevOps teams. The primary first-year mission is to build and operate these AWS GovCloud environments, ensuring continuous compliance with FedRAMP 20x standards through machine-readable, frequently verified evidence. The SRE team is an engineering team focused on automation, with the goal of eliminating manual operational work. Hands-on operational tasks will be capped at approximately half of the team's capacity, with the remainder dedicated to engineering solutions to automate operations.

Requirements

Staff-level technical depth: ability to critically review Terraform, pipeline definitions, and architecture proposals.
Personal experience building and operating complex cloud environments.
Ability to carry context in an incident.
Real people-management experience: experience hiring, growing, and running a small SRE or DevOps team.
Ownership of team's delivery and architecture.
Experience with appliance-model and single-tenant VM fleets alongside shared services.
Experience with fleet upgrade orchestration, golden images, and staged rollout at scale (hundreds-to-thousands).
Experience with CI/CD pipelines (build, signing, artifact management, quality and security gates).
Experience with production change processes, including change request governance, access controls, and approval standards.
Experience with release and update machinery for cloud fleets.
Experience with incident management processes and tooling.
Experience with on-call design.
Experience with automated environment promotion paths.
Experience with intake and prioritization of operational requests.
Experience building a culture of ownership, transparency, and reliable execution.
Experience setting delivery rhythms and running planning cycles.

Nice To Haves

Experience with AWS GovCloud.
Experience with FedRAMP authorization and continuous monitoring.
Experience with FedRAMP 20x Key Security Indicators and standard schema.
Experience with cloud cost visibility tools.
Experience with auditable separation of duties between development and production.

Responsibilities

Own the AWS GovCloud landing zone for new product environments, including multi-account structure, SCPs, guardrails, logging, security tooling accounts, and IaC-native provisioning.
Own the continuous-compliance evidence pipeline, including collection, normalization, and reporting of FedRAMP 20x Key Security Indicators according to the FedRAMP standard schema.
Manage FedRAMP continuous monitoring obligations for covered environments, relieving feature teams of this operational load.
Own the CI/CD pipelines required for the GovCloud environments, including build, signing, artifact management, and quality/security gates.
Provide cloud cost visibility for the covered accounts.
Own the production change process, including change request governance, access controls, and approval standards, ensuring auditable separation of duties.
Own the release and update machinery for cloud fleets, including mandatory security updates, staged rollouts, cluster-coordinated installs, and verification of patch deployment.
Own the incident management process, tooling, on-call design, and post-incident review cadence.
Drive the automated environment promotion path from development through staging to production.
Manage intake and prioritization for operational requests from feature teams and leadership, maintaining a clear view of active work, owners, and risks.
Ensure the team is not overcommitted and that feature teams have a clear, responsive interface for operational needs.
Lead a team of DevOps, SRE, and security automation engineers, providing direction, accountability, and clarity.
Partner with the VP of Application Engineering on workforce planning, hiring, role design, and onboarding.
Build a culture of ownership, transparency, and reliable execution, setting delivery rhythms, running planning cycles, and maintaining visibility into team capacity and health.