DevOps Lead; FedRAMP

At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.

We’re looking for driven and talented people like you to join our team and our mission to change the future of cloud security.
Ready to dive in and swim with our pod?

• High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
• Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
• Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
• Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.

The Dev Ops Lead (FedRAMP) will own Orca’s FedRAMP environment. All of it. The infrastructure, the authorization, and the relationships with the agencies and assessors who depend on it.

This is a builder’s role with real authority. You will be the most senior Orca engineer in our federal environment and the person everyone comes to for anything that touches it, from a Terraform change to an agency security review. You will set the technical direction, and you will implement it yourself. Over time you will grow a small US based team around you while keeping your own hands on the system.

The timing is good. FedRAMP is moving to 20x, with machine readable OSCAL packages, Key Security Indicators, and continuous validation replacing point in time assessment. Most companies are treating that as a compliance problem. We want to treat it as an automation problem, and you will be the one who designs how Orca does it.

If you like being the definitive expert on a system that matters, and you want the ownership without giving up the engineering, this is a rare shape of role.

Build and operate the federal environment

• Own and evolve Orca’s FedRAMP environment in AWS Gov Cloud, AWS East/West, Azure Government, Azure Commercial, and GCP, including EKS, Terraform, Helm, CI/CD, FIPS validated endpoints, hardened images, secrets management, and centralized logging.
• Write the infrastructure code yourself and set the standards for how it is written.
• Design the automation that makes compliance a byproduct of how the system runs, covering continuous configuration validation, drift detection, evidence collection, and inventory accuracy.
• Decide how new platform capabilities land in the federal environment, and bring them in cleanly.
• Own production health, monitoring, and incident response for the environment.

Own the FedRAMP program

• Run continuous monitoring end to end, including scanning, POA&M, inventory, and reporting.
• Own the authorization artifacts, from the SSP and boundary diagrams through control implementation, and lead their move to OSCAL.
• Assess and categorize changes to the boundary, and own the notification process that goes with them.
• Lead annual assessment and 3
  
  PAO engagements, from scoping through evidence to closing findings.
• Be Orca’s interface to the FedRAMP PMO, our agency sponsor, and our assessors.
• Track where the program is heading and tell us what it means for us early.
• Be the technical voice of our federal environment in front of agency security teams, prime contractors, and prospects, across security…