Senior DevSecOps Engineer - Remote

Overview

Craft is a leader in supplier risk intelligence, helping enterprises discover, evaluate, and monitor their suppliers. We are looking for a Senior DevSecOps Engineer to establish a FedRAMP-authorized cloud environment and enhance our cloud platform's security.

In Short

• Lead FedRAMP readiness program and define the roadmap.
• Design and implement AWS GovCloud architecture for compliance.
• Translate NIST 800-53 controls into technical implementations.
• Build compliance automation tools for control validation.
• Develop secure CI/CD pipelines with security integration.
• Maintain System Security Plans and audit evidence packages.
• Perform threat modeling and security architecture reviews.
• Serve as a subject matter expert on FedRAMP and NIST controls.

Requirements

• Hands-on FedRAMP ATO experience.
• Strong knowledge of NIST 800-53 Rev. 5 controls.
• Experience securing AWS environments.
• Familiarity with AWS GovCloud.
• Advanced Terraform skills.
• Experience with CI/CD pipeline security.
• Direct experience with auditors and 3PAOs.

Benefits

• Competitive salary starting at $170,000 USD/year.
• Equity at a fast-growing startup.
• Unlimited vacation time.
• 99% covered health, dental, and vision insurance.
• 401K options through Empower.