Senior Site Reliability Engineer; FedRAMP

Now is an amazing time to join Nozomi Networks as we build the future of OT and IoT cybersecurity.

We defend some of the world’s largest organizations and critical infrastructure in more than 68 countries and we’re just getting started. Our AI-powered cybersecurity platform secures operational technology (OT) and Internet of Things (IoT) infrastructures for enterprises and government entities across energy, manufacturing, transportation, resources, and critical infrastructure.

As we expand our product portfolio and our footprint in the US public sector, our Engineering department is hiring a Site Reliability Engineer to take ownership of our FedRAMP-authorized environment. You will be the primary engineer responsible for the day-to-day reliability, security posture, and compliance operations of this environment — including patching, deployment, and continuous monitoring (Con Mon) — working closely with our Switzerland-based SRE team and our Security & Compliance organization.

This position carries a high degree of autonomy and responsibility: you will be the primary owner of the FedRAMP environment and the outcomes itdepends on.

You could be the next "Nozomier"! If this sounds like you, read on.

• Embode the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust
• Act as the primary owner of our FedRAMP environment, ensuring its availability, performance, and continuous compliance with the FedRAMP baseline
• Build and maintain the cloud infrastructure and related services within the FedRAMP authorization boundary (AWS Gov Cloud)
• Own the patching and vulnerability remediation lifecycle, meeting FedRAMP remediation SLAs(30/90/180 days by severity) and maintaining associated evidence
• Execute and improve the Continuous Monitoring (Con Mon) program: monthly vulnerability scanning, POA&M creation and tracking, deviation requests, and monthly deliverables to our3
  
  PAO and agency sponsors
• Manage deployments and change control within the boundary, ensuring changes follow the approved Configuration Management process and Significant Change Request procedures where applicable
• Maintain system hardening against CIS/STIG benchmarks and FIPS-validated cryptography requirements
• Promote and implement automated solutions across application deployment, patching, evidence collection, and operational activities
• Troubleshoot issues across the entire stack, from network and OS to applications
• Support annual assessments and audits (3
  
  PAO), producing artifacts and demonstrating controlimplementation
• Drive post-incident analysis according to our no-blame culture, including incident reporting obligations to agency stakeholders and US-CERT/CISA where required
• Participate in periodic on-call duties for the FedRAMP environment
• Operate in settings with strong confidentiality and data privacy protocols

• US citizenship or lawful permanent residency, with all work performed from within the United States, and the ability to pass applicable background investigations (per FedRAMP and agency requirements)
• Proven professional experience as an SRE, Dev Ops, or Cloud engineer, including experience operating in a FedRAMP, FISMA, DoD IL, or similarly regulated environment
• Ability to work autonomously and communicate effectively in an async-first setup with a teambased in a different time zone (Central European Time)
• Working knowledge of NIST SP 800-53 controls and the FedRAMP continuous monitoring process(scanning, POA&Ms, deviation requests, annual assessments)
• Strong hands-on experience with Kubernetes
• Hands-on experience with AWS, ideally AWS Gov Cloud (US)
• Experience with vulnerability management tooling (e.g., Tenable/Nessus, Qualys) and…