Senior Production Support Engineer

Quick Facts

• Role: Senior Production Support Engineer (security-focused)
• Focus: AWS infrastructure security and FedRAMP compliance
• Core work: identity, network, and cloud security controls, automation, audit readiness

Description

You will design, build, and operate identity, network, and cloud security controls in an AWS environment that must meet FedRAMP requirements. The role implements and maintains controls mapped to NIST SP 800-53, engineers secure AWS network and IAM architectures, and uses infrastructure-as-code to automate guardrails, monitoring, and evidence collection for audits.

Responsibilities

• Implement and maintain FedRAMP security controls mapped to NIST SP 800-53
• Engineer secure AWS network architecture: VPC design, segmentation, security groups, NACLs, Transit Gateway, PrivateLink, WAF, egress controls
• Design and improve IAM: IdP integration, SSO, federation (SAML, OIDC, OAuth), least privilege, privileged access, secrets management, KMS
• Build and maintain infrastructure as code in Terraform (reusable modules, secure defaults, policy-as-code, automated guardrails)
• Harden and secure Linux systems and containers, including Kubernetes workloads
• Support continuous monitoring: vulnerability remediation (timelines), POA&M tracking, and evidence collection for audits
• Automate control validation and evidence gathering
• Partner with Engineering, SRE, and Compliance to embed security into the SDLC and deployment pipelines
• Contribute to incident response and detection engineering (logging, SIEM integration, alerting)
• Produce technical documentation and architecture reviews; mentor other engineers

Requirements

• 5+ years in security engineering, cloud security, or infrastructure security
• FedRAMP security controls experience (or equivalent: NIST 800-53, NIST 800-171, or CMMC)
• Solid knowledge of NIST security controls, including baselines/control families and mapping to technical implementations
• Strong hands-on Terraform skills (module design, state management, CI/CD-driven deployments)
• Deep AWS network security engineering experience (VPC, Transit Gateway, security groups, WAF, GuardDuty, Security Hub, Config, CloudTrail)
• Hands-on identity engineering: IdPs; SAML, OIDC, OAuth 2.0; LDAP, Kerberos; AWS IAM and KMS
• Strong TLS and PKI knowledge (certificate lifecycle management and secure protocol configuration)
• Strong Linux systems and container security experience
• Scripting proficiency (Python, Go, or Bash)
• Strong written and verbal communication with auditors and engineering teams
• U.S. citizenship; ability to work from the U.S.; willingness for additional screening/background checks

Benefits

• Time off programs
• Medical, dental, and vision
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k)
• Employee stock purchasing program

Success Milestones

• First 90 days: understand infrastructure architecture and control inventory; remediate a defined set of control gaps
• 6 months: deliver network and identity security improvements via Terraform; automate at least one control validation workflow
• 12 months: become a recognized technical authority for AWS infrastructure security and compliance; help keep the team audit-ready