Sr. Staff Systems Engineer (Fedramp)

Location: Santa Clara, California, United States of America; office-based work is expected. U.S. citizenship is required, and the role requires passing background checks and security investigations for DoD IL5 and federal boundary access.

Salary: $153,700–$248,600 per year, with potential restricted stock units and bonus.

Company

Cybersecurity organization focused on protecting digital infrastructure through cloud security, automation, and advanced technology.

What you will do

• Architect and maintain Terraform and Ansible infrastructure automation across GCP and GCP Assured Workloads FedRAMP boundaries.
• Build and harden secure CI/CD pipelines with static analysis, container scanning, vulnerability gates, and artifact provenance signing.
• Operate and scale production GKE clusters with network isolation, zero-trust pod security, mutual TLS, and role-based access controls.
• Automate NIST SP 800-53 and DoD Cloud Computing SRG IL5 controls, continuous monitoring evidence, and POA&M remediation.
• Design monitoring, audit logging, alerting, and telemetry using Google Cloud Operations Suite and BigQuery.
• Lead change governance, blue/green and canary releases, incident response, on-call operations, and mentorship for junior engineers.

Requirements

• 8+ years of experience in DevOps, SRE, or systems engineering for complex, highly regulated cloud environments.
• Deep hands-on experience with GCP, GCP Assured Workloads, Cloud IAM, and VPC Service Controls.
• Expertise operating GKE or Kubernetes clusters in mission-critical production environments.
• Advanced Terraform and configuration management experience, plus strong enterprise CI/CD pipeline engineering skills.
• Experience with FedRAMP Moderate/High, NIST SP 800-53, or DoD Cloud Computing SRG IL4/IL5 controls.
• U.S. citizenship and eligibility to pass required federal security investigations are mandatory; immigration sponsorship is not available.

Nice to have

• Google Cloud Professional Cloud DevOps Engineer, Professional Cloud Security Engineer, or CKA certification.
• Experience with BigQuery, service mesh technologies such as Anthos Service Mesh, Golang, or Rust.

Culture & Benefits

• Full-time in-office collaboration with flexibility when needed.
• Opportunity to work across Engineering & Infrastructure, Information Security, R&D, and FedRAMP Production Operations.
• Benefits may include restricted stock units and a bonus in addition to base salary.
• Equal opportunity workplace with reasonable accommodation support.