Overview
Lead a new cross-product SRE team that builds and operates the AWS GovCloud environments bringing additional BeyondTrust products into FedRAMP authorization, owning reliability, change control, and continuous-compliance automation. This is a player-coach role combining hands-on staff-level technical depth with people-management of a small SRE or DevOps team.
What you'll do
- Own the AWS GovCloud landing zone for the new product environments: multi-account structure, SCPs and guardrails, logging and security-tooling accounts, and IaC-native provisioning.
- Own the continuous-compliance evidence pipeline: collection, normalization, and reporting of FedRAMP 20x Key Security Indicators, built to the FedRAMP standard schema.
- Own FedRAMP continuous monitoring obligations for the covered environments, keeping that operational load off feature team engineers; broader compliance obligation tracking and audit coordination are owned by central teams.
- Own the CI/CD pipelines the GovCloud environments require (build, signing, artifact management, quality and security gates) and cloud cost visibility for the covered accounts.
- Own the production change process, including change request governance, access controls, and approval standards, with auditable separation of duties between development and production.
- Own release and update machinery for cloud fleets: mandatory security updates, staged and jittered rollout windows, cluster-coordinated installs, and verification that a patch actually landed everywhere it was scoped to.
- Own the incident management process, tooling, on-call design, and post-incident review cadence.
- Drive the automated environment promotion path from development through staging to production.
- Run intake and prioritization for operational requests from feature teams and leadership, maintaining a single trusted view of active work, owners, and risks.
- Lead a team of DevOps, SRE, and security automation engineers, providing direction, accountability, and operational clarity.
- Partner with the VP of Application Engineering on workforce planning, hiring, role design, and onboarding for the function.
- Build a culture of ownership, transparency, and reliable execution; set delivery rhythms, run planning cycles, and maintain visibility into team capacity and health.
What you'll need
- Staff-level technical depth sufficient to critically review Terraform, pipeline definitions, and architecture proposals, and to personally build and operate this machinery.
- Real people-management experience: has hired, grown, and run a small SRE or DevOps team and owns the team's delivery.
- Ability to carry context in an incident.
Nice to have
- Hands-on operational work is capped at roughly half of team capacity; the manager defends that split against day-to-day pressure. (Stated as an operating expectation rather than a candidate qualification.)
Details
- Location: Remote, United States; Central or Eastern Time Zone.
- Reports to the VP of Application Engineering.
- Workload shape includes appliance-model and single-tenant VM fleets alongside shared services; fleet upgrade orchestration, golden images, and staged rollout at hundreds-to-thousands scale are core.
Read the full description and apply on the company’s own careers page.