Senior Security Engineer, FedRAMP

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer, FedRAMP based in the United States.

This role offers the opportunity to strengthen the security, resilience, and compliance of critical cloud environments supporting regulated workloads. You will design, improve, and operate security workflows across infrastructure, automation, access management, and incident response. The position combines cloud security expertise, operational excellence, and automation-driven problem solving. You will play a key role in maintaining secure FedRAMP environments while partnering with engineering, compliance, and product teams. This is a high-impact opportunity for a security professional who enjoys building scalable processes and improving security operations. The role is ideal for someone who brings strong technical expertise, a proactive mindset, and a passion for secure cloud innovation.

Accountabilities: As a Senior Security Engineer, FedRAMP, you will own and improve security operations workflows that ensure secure, compliant, and reliable infrastructure across regulated cloud environments.

Maintain and enhance CI/CD pipelines to support secure application deployments and infrastructure workflows.

Review infrastructure-as-code changes and participate in change control processes to ensure security, testing, and compliance requirements are met.

Perform security impact analyses for system and application changes, providing recommendations and risk assessments.

Manage operating system and infrastructure patching processes, including hardened images and secure baseline configurations.

Govern identity and access management processes, including account provisioning, role-based access control, and periodic access reviews.

Maintain logging and monitoring pipelines, optimize SIEM integrations, and improve security alert accuracy and coverage.

Investigate and respond to security incidents, supporting detection, containment, recovery, and post-incident improvements.

Develop and maintain operational documentation, including runbooks, standard operating procedures, and compliance evidence.

Collaborate with infrastructure, operations, product, and compliance teams to integrate secure practices into development and operational workflows.

Drive security automation initiatives to improve efficiency, reduce manual effort, and strengthen security operations.

Requirements

The ideal candidate is an experienced security engineer with strong cloud infrastructure knowledge, FedRAMP expertise, and a track record of building secure and scalable environments.

5+ years of experience in security engineering, infrastructure security, or security operations within federal, regulated, or highly controlled cloud environments.

Strong understanding of NIST 800-53 security controls and continuous monitoring practices.

Proven experience implementing AWS and SaaS security best practices.

Hands-on experience with CI/CD pipelines, infrastructure automation, and infrastructure-as-code security practices.

Experience managing patch cycles, hardened configurations, secure image pipelines, and vulnerability remediation processes.

Strong knowledge of identity and access management principles, including IAM design and enforcement at scale.

Experience managing SIEM pipelines and supporting Tier 1 and Tier 2 security incident response activities.

Strong technical documentation, communication, collaboration, and project management skills.

Ability to work effectively across security, engineering, compliance, and operational teams.

Experience integrating security automation into DevSecOps workflows is preferred.

Prior experience supporting federal audits, third-party assessments, or compliance engagements is a plus.

Familiarity with SaaS security operations, cloud-native environments, Terraform, containers, and modern security review practices is preferred.

Benefits

Competitive base salary range of $153,000 to $220,000 USD , depending on skills, experience, qualifications, and location.

Eligibility for additional compensation opportunities, including bonuses or incentive programs.

Equity participation opportunities.

Comprehensive benefits package supporting health, wellness, and financial security.

Opportunity to work on large-scale cloud security initiatives in a regulated environment.

Remote work flexibility within the United States.

Collaborative environment with engineering, security, compliance, and product teams.

Opportunity to influence security strategy, automation, and operational excellence.

Professional growth opportunities in cloud security, compliance, and DevSecOps practices.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1