Назад
Company hidden
2 дня назад

Site Reliability Engineer (FedRAMP Vulnerability)

114 000 - 180 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Site Reliability Engineer (FedRAMP Vulnerability): Owning vulnerability findings from intake through validated remediation and closure while building automation, deployment pipelines, and operational tooling for FedRAMP cloud environments with an accent on dependency analysis, infrastructure security, and compliance evidence. Focus on validating fixes across hosts, containers, images, and application dependencies, troubleshooting distributed systems, and reducing manual operational toil.

Location: Remote, Texas, United States; available to be online from 9am-4pm PST.

Salary: $114,000-$180,000 USD gross annual base pay.

Company

hirify.global provides engineering and infrastructure services supporting cloud platforms and managed devices.

What you will do

  • Own FedRAMP vulnerability findings from intake through triage, remediation, validation, and closure.
  • Prioritize host, OS-package, container, base-image, and application-dependency findings using exploitability, asset criticality, and remediation timelines.
  • Identify vulnerable software sources and coordinate dependency updates, image rebuilds, host changes, deviations, false-positive corrections, and ticket cleanup.
  • Implement and maintain automation, deployment pipelines, testing frameworks, operational tooling, runbooks, and knowledge-transfer processes.
  • Validate remediation using package versions, build artifacts, image manifests, deployed-host evidence, and scanner rescans; maintain Jira evidence, ownership, escalation, exception rationale, and backlog metrics.
  • Troubleshoot distributed infrastructure, support high availability, contribute to deployment-process refactoring and cluster builds, and collaborate with engineering, product, and business teams across time zones.

Requirements

  • 5+ years of experience in Site Reliability Engineering, DevOps, Infrastructure Engineering, or a related role supporting cloud-based production environments.
  • Practical vulnerability-management experience, including Qualys, JFrog Xray, SCA/SBOM, or equivalent tooling.
  • Knowledge of dependency management for Ruby/Bundler, Python/pip, and Go modules, including direct and transitive dependencies, version constraints, lockfiles, go.mod/go.sum, and verifying effective versions in built artifacts.
  • Experience developing and maintaining infrastructure automation using Ansible.
  • Experience administering and troubleshooting Linux-based systems and distributed infrastructure environments.
  • Experience designing, implementing, and maintaining CI/CD pipelines, including GitLab CI.
  • Experience supporting large-scale infrastructure environments with hundreds or thousands of systems.
  • Availability to be online from 9am-4pm PST.

Nice to have

  • Familiarity with AWS or other public cloud platforms and hybrid infrastructure environments.
  • Knowledge of monitoring, observability, reliability engineering practices, and related tooling.
  • Familiarity with Kubernetes concepts and containerized application platforms.
  • Experience using AI-assisted development tools to improve software development, automation, operational analysis, and engineering productivity.
  • Experience managing fleet-wide software deployments.
  • Experience providing incident support and triage.

Culture & Benefits

  • Full-time regular employees receive medical, dental, vision, flexible spending, commuter, life, disability, critical illness, and accident insurance options.
  • Benefits include a 401(k) plan, paid time off, paid holidays, wellness days, statutory leaves, and an employee assistance program.
  • Continuing education and professional development are supported through platforms such as Udemy and Coursera.
  • Tuition reimbursement is available after six months, subject to a cap.
  • The SRE Compliance & Security Initiatives team operates with autonomy and supports initiative ownership, automation, reliability, and operational improvements.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →