UB Senior DevOps​/Compliance Engineer; FedRAMP Continuous Compliance) UBERETHER · Remote DevOps

Senior Dev Ops & Release role ote
· full-time.

devopsroles summary, based on the employer's posting.

• Build CI/CD pipelines and GCP automation that apply FedRAMP 20x KSI controls to deployments
• Set pipeline security gates, policy checks and monitoring with engineering, then define reusable KSI patterns
• Create Terraform and Deployment Manager infrastructure, plus automated jobs that gather and verify KSI evidence
• Write assessor-ready procedures for deployment, monitoring, incident response and ongoing KSI checks
• Support audits by explaining evidence packages, and coach engineers on secure automation and continuous compliance

• At least eight years in Dev Ops, site reliability engineering or platform automation
• Three or more years building GCP-based CI/CD pipelines and automation
• A record of embedding security or compliance controls in deployment pipelines and supporting federal frameworks operationally
• Strong GCP, infrastructure-as-code and Git Lab CI/CD experience, with knowledge of FedRAMP 20x KSIs

This senior role suits someone who can lead Dev Ops decisions while building pipelines, evidence automation and operational procedures hands-on. You’ll work across engineering and compliance teams and support customer and assessor reviews. The role can be remote or hybrid, but applicants must currently live in DC, Florida or another listed state.

Uber Ether is a leader in the hyper-secure infrastructure space for Identity and Access Management (IAM), #Zero Trust, and compliance acceleration. Our platform and expert services team enable government and commercial customers to have ultimate control over access to critical information. We are employee-first, with outstanding benefits and a track record of upskilling and fostering growth. We're looking for employees who get excited about pioneering novel solutions to new, complex challenges.

This role sits within Uber Ether's Compliance Business Unit, supporting a FedRAMP 20x advisory project built on Google Cloud Platform (GCP). As Senior Dev Ops Engineer, you will build and operate the CI/CD pipelines, automation, and monitoring that put FedRAMP 20x Key Security Indicator (KSI) requirements into practice, and author the Standard Operating Procedures (SOPs) that keep Ping's platform in continuous compliance long after go-live.

• Serve as the principal Dev Ops authority for implementing FedRAMP 20x KSI requirements into the CI/CD and operations model
• Define and maintain the automation roadmap for operationalizing all the KSIs across the FedRAMP KSI families within the Advantage Dev Ops toolchain
• Lead design sessions with engineering to determine how each KSI is enforced, tested, and evidenced in the deployment pipeline
• Drive technical decision-making on pipeline gating, automated policy checks, and continuous monitoring instrumentation
• Partner with the Senior Architect and Compliance BU leadership to translate KSI mapping decisions into working Dev Ops procedures
• Establish Dev Ops standards and design patterns for KSI enforcement that can be reused across future GCP engagements

• Own the end-to-end implementation of CI/CD pipelines and automation that enforce FedRAMP 20x KSI requirements across Advantage deployments on Google Cloud Platform
• Build and maintain Infrastructure as Code (Terraform, Deployment Manager) that encodes KSI controls directly into GCP deployments
• Implement automation that continuously collects and packages compliance evidence for each of the KSIs
• Stand up container security scanning, network segmentation enforcement, and secrets management within the CI/CD pipeline
• Build and maintain Git Lab CI/CD pipelines, Terraform modules, and secure deployment tooling for the environment
• Champion Dev Sec Ops  practices, ensuring KSI-aligned security gates are built into every pipeline stage from day one

• Author and maintain Standard Operating Procedures (SOPs) covering deployment, monitoring, incident response, and KSI verification for the platform
• Lead working sessions with engineering to document repeatable, auditable procedures for maintaining KSI compliance post-authorization
• Produce SOP documentation suitable for assessor review, mapping each procedure back to its corresponding KSI
• Support 3
  
  PAO assessments and FedRAMP 20x reviews by walking through operational procedures and evidence…