Sec Dev Ops Engineer - Level 3

The posting, as Knox Systems wrote it

About Knox

Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions — from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance.

Work at Knox is high-impact and purpose-driven. The problems we solve are high-stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail.

ABOUT THE ROLE

The SecDevOps Engineer designs, automates, and maintains Knox’s secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP within our FedRAMP-authorized, multi-tenant boundaries. Day-to-day, the work centers on Zero Trust access, continuous monitoring, cloud security posture, and observability — keeping secure, compliant, and repeatable operations running across federal cloud environments.

The ideal candidate brings 5–7 years of hands-on experience bridging core cloud engineering with security operations. Whether you are a proven mid-level engineer looking to step into a broader architecture scope or an experienced practitioner seeking direct operational impact, this role embeds security controls directly into the deployment fabric using Infrastructure as Code (IaC) and Policy-as-Code frameworks.

ROLE FOCUS & TECHNICAL MATRIX

Zero Trust & Identity- Zscaler (ZPA / PRA), HashiCorp Vault, Okta, Azure AD / Entra ID, AWS IAM Identity Center

Infrastructure as Code - Terraform (Primary), CloudFormation, GitOps (ArgoCD / Helm)

Security & Compliance - FedRAMP (IL4 boundaries), NIST 800-53, Wiz, Qualys, CrowdStrike, OPA

Observability & Ops - Grafana, Prometheus, CloudWatch, PagerDuty, ServiceNow (CAB / eCAB)

KEY RESPONSIBILITIES

ZERO TRUST & ACCESS MANAGEMENT

• Support and operate Zero Trust Network Access (Zscaler ZPA / PRA) architectures including app connectors, privileged remote access, and private application access boundaries.
• Manage privileged credentials, API tokens, and secrets lifecycle using HashiCorp Vault, establishing automated credential flows and programmatic rotation.
• Integrate and maintain federated identity providers (Okta, Azure AD / Entra ID, AWS IAM Identity Center) and actively support ongoing multi-cloud identity migrations.
• Enforce strict least-privilege access models and machine-to-machine credential rotation policies across all automation systems.

CLOUD INFRASTRUCTURE & SECURE AUTOMATION

• Design, build, and manage multi-tenant infrastructure across AWS, Azure, and GCP using I

[…]
ection (EDR), cloud security posture management (CSPM), or vulnerability scanning platforms (e.g., CrowdStrike, Wiz, Qualys).

• Containers: Experience building, configuring, and troubleshooting containerized environments (Docker, Kubernetes).
• Compliance Alignment: Practical or working understanding of FedRAMP, NIST 800-53, or SOC 2 compliance frameworks.

PREFERRED CERTIFICATIONS

• HashiCorp Certified: Terraform Associate
• AWS Certified SysOps Administrator or Solutions Architect (Associate)
• CompTIA Security+, CISSP, or equivalent security credential
• Microsoft Certified: Azure Administrator Associate

Compensation Range: 155k-185k, variable annual bonus, and equity

Hiring Requirement: Due to the nature of our work with federal government clients and compliance with applicable regulations, this position requires U.S. citizenship. Dual citizenship is not permitted for this role. Candidates must be able to provide documentation verifying sole U.S. citizenship status as part of the background check process.

Any offer of employment is contingent upon the successful completion of all required pre-employment screenings, including a background check, in accordance with applicable laws and government contract requirements.

Benefits & Perks

Knox offers a competitive employee benefits package including Medical, Dental, Vision, Life & Disability, unlimited PTO, and an employee funded 401k plan. Please note, benefits are subject to change.

We are an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other legally protected status.

Knox is proud to support veteran hiring — we encourage veterans and transitioning service members to apply and welcome the unique skills and experience you bring.