Senior DevOps Engineer – US Federal, AWS GovCloud

Windward

Senior DevOps Engineer building Windward’s AWS GovCloud enclave for federal maritime-intelligence customers. Leading FedRAMP authorization, workload migration, compliance, EKS, Terraform and team growth.

Posted 9/10/2026full-timeWashington, D.C. • Washington • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in AWS GovCloud environment management, including FedRAMP compliance, Terraform infrastructure as code, and production Kubernetes operations. Proven ability to lead federal workload migrations, conduct thorough audits, and manage a high-performing infrastructure team.

Highest-signal resume keywords

AWS GovCloud ExperienceFedRAMP Authorization LeadershipExpert-Level Terraform SkillsProduction Kubernetes ManagementPeople Management Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS IAMAWS KMSAWS VPC DesignAWS GuardDutyAWS Security HubAWS ConfigAWS CloudTrailTerraform Module DesignKubernetes Security HardeningControl Audits

Soft Skills

Technical MentorshipPerformance ManagementCommunication with Auditors

Tools & Technologies

EKSCI/CD PipelinesAgentic ToolingCentralized LoggingIncident Response

Certifications & Qualifications

Active US Government Security ClearanceTS/SCI Clearance (Preferred)

Industry Keywords

FedRAMP ComplianceCMMC Level 2 AssessmentSSP AuthorshipSPRS SubmissionDoD SRG Impact LevelsDISA STIGsRestricted-Environment Data Platforms

Tech Stack

Tools & technologies

AWSCloudKubernetesMongoDBTerraformTypeScript

About the role

Key responsibilities & impact

Build the entire AWS GovCloud environment from scratch, including account and Organizations structure, networking, identity, encryption, logging, boundary protection and supporting services
Own the federal environment in production, including availability, security posture, patch state, cost and audit readiness
Lead the end-to-end migration of federal workloads into GovCloud, including planning, sequencing, cutover, validation and rollback criteria
Conduct internal control-by-control audits, gap analysis, findings and remediation planning
Define and defend the FedRAMP authorization boundary with data-flow diagrams, inventory and technical control evidence
Own Terraform infrastructure as code, drift detection, policy-as-code guardrails and reproducible builds
Build and operate hardened EKS workloads, including workload identity, admission control, patching and upgrades
Build FedRAMP-compliant CI/CD with separated pipelines, signed artifacts, SBOMs, provenance and controlled promotion paths
Implement continuous monitoring and monthly ConMon reporting, including vulnerability scanning, POA&M management, deviation requests and significant change requests
Establish centralized logging, audit-trail integrity, alerting, incident response and on-call for the federal environment
Work with the CISO, 3PAO and prime contractors on assessment readiness, evidence collection, SSP maintenance and SPRS scoring
Establish operational runbooks, DR/BCP procedures and RPO/RTO validation
Apply agentic tooling to infrastructure and compliance work with human gates and audit trails
Hire, onboard and lead the US federal infrastructure team, setting technical standards and on-call culture

Requirements

What you’ll need

7+ years in DevOps, SRE, platform or cloud infrastructure engineering
At least 3 years of hands-on AWS GovCloud (US) experience
Experience leading a FedRAMP authorization and/or commercial-to-GovCloud migration end to end
Ability to conduct a full control-by-control audit of an environment built by the candidate, produce defensible findings and evidence, and close gaps
Eligible for an active US Government security clearance, Secret minimum, currently in scope and transferable
US citizenship
Deep AWS expertise, including IAM, permission boundaries, KMS, VPC design, private connectivity, GuardDuty, Security Hub, Config, CloudTrail and log integrity
Expert-level Terraform, including module design and multi-account state management
Production Kubernetes experience, preferably EKS, including security hardening and upgrade management
Daily use of coding agents and agentic workflows, with judgment about when automated output requires a human gate
Track record of shipping working infrastructure in weeks and becoming productive quickly in unfamiliar codebases and organizations
People management experience, including hiring, onboarding, performance management and technical mentorship
Comfortable serving as the senior technical voice with auditors, assessors and prime contractor security teams
Preferred: TS/SCI clearance
Preferred: CMMC Level 2 assessment experience, SSP authorship and SPRS submission
Preferred: DoD or IC customer experience or subcontractor experience under DFARS 252.204-7012 flowdowns
Preferred: DISA STIGs, DoD SRG impact levels IL4/IL5 or AWS Secret Region familiarity
Preferred: SingleStore (MemSQL) deployment, operation or migration experience
Preferred: restricted-environment data platform experience, such as MongoDB Atlas for Government
Preferred: commercial-to-federal codebase separation and release management experience

Benefits

Comp & perks

Equal opportunity employer
AI-first, agentic development environment
Opportunity to define foundational architecture and operate a greenfield federal infrastructure environment
Opportunity to hire and lead the US federal infrastructure team
Highly visible work close to government customers and major technical decisions