Description

Key Responsibilities:

Zero Trust & Access Management:

• Support and operate Zero Trust Network Access (Zscaler ZPA / PRA) architectures including app connectors, privileged remote access, and private application access boundaries.
• Manage privileged credentials, API tokens, and secrets lifecycle using HashiCorp Vault, establishing automated credential flows and programmatic rotation.
• Integrate and maintain federated identity providers (Okta, Azure AD / Entra ID, AWS IAM Identity Center) and actively support ongoing multi-cloud identity migrations.
• Enforce strict least-privilege access models and machine-to-machine credential rotation policies across all automation systems.

Cloud Infrastructure & Secure Automation:

• Design, build, and manage multi-tenant infrastructure across AWS, Azure, and GCP using Infrastructure as Code (Terraform as primary; CloudFormation as needed).
• Automate end-to-end provisioning, configuration management, and environment deployment workflows via secure CI/CD and GitOps paradigms.
• Manage cloud networking, IAM topologies, and security group configurations tailored strictly to FedRAMP controls and Impact Level 4 (IL4) boundaries.

CI/CD, Policy-as-Code & Container Security:

• Develop and maintain secure CI/CD pipelines utilizing GitLab CI, Azure DevOps, or Jenkins.
• Integrate Policy-as-Code frameworks (such as OPA or Azure Policy) into pipeline gates to enforce organizational compliance before infrastructure provisioning.
• Embed automated static application security testing (SAST), software composition analysis (SCA), and container vulnerability scans into active deployment workflows.
• Build, deploy, and troubleshoot containerized workloads within managed Kubernetes environments (EKS, AKS, GKE) using Helm, ArgoCD, or Kustomize.

Continuous Monitoring, Vulnerability & Compliance:

• Support FedRAMP Continuous Monitoring (ConMon) cycles by implementing technical security controls, managing incident tickets, and executing technical remediation follow-through.
• Maintain IaC, pipeline architectures, and operating configurations compliant with FedRAMP and NIST 800-53 standards.
• Automate programmatic audit evidence generation for specific control requirements, including CM-2 (Baseline Configurations), CM-6 (Configuration Settings), AU-2 (Event Logging), and SC-12 (Cryptographic Key Establishment and Management).
• Participate in formal enterprise change management processes via ServiceNow, preparing documentation for Technical Change Reviews and Change Advisory Board (CAB/eCAB) workflows

Key Skills

Education

Bachelor's degree