{"id":176914,"url":"https://alion.io/job/orca-security-devops-lead-fedramp","title":"DevOps Lead (FedRAMP)","company":{"id":5632,"name":"Orca Security","domain":"orca.security","url":"https://alion.io/company/orca-security","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":92,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-17T05:46:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":210000,"max":230000,"currency":"USD","period":"year","gross":null,"usd_annual":230000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"Helm","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Orca Security","optional":true}],"status":"live","first_seen_at":"2026-08-30T17:04:29Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-17T14:34:32Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":47},"description":"Location: East Coast, US (Remote)\nBig Ideas. Real People.\nAt Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.\nWe’re looking for driven and talented people like you to join our team and our mission to change the future of cloud security. Ready to dive in and swim with our pod? \nHighlights:\nHigh-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.\nDisruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company. \nWell-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence. \nRespectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.\nAbout the Role: \nThe DevOps Lead (FedRAMP) will own Orca's FedRAMP environment. All of it. The infrastructure, the authorization, and the relationships with the agencies and assessors who depend on it.\nThis is a builder's role with real authority. You will be the most senior Orca engineer in our federal environment and the person everyone comes to for anything that touches it, from a Terraform change to an agency security review. You will set the technical direction, and you will implement it yourself. Over time you will grow a small US based team around you while keeping your own hands on the system.\nThe timing is good. FedRAMP is moving to 20x, with machine readable OSCAL packages, Key Security Indicators, and continuous validation replacing point in time assessment. Most companies are treating that as a compliance problem. We want to treat it as an automation problem, and you will be the one who designs how Orca does it.\nIf you like being the definitive expert on a system that matters, and you want the ownership without giving up the engineering, this is a rare shape of role.\nWhat You'll Do:\nBuild and operate the federal environment\nOwn and evolve Orca's FedRAMP environment in AWS GovCloud, AWS East/West, Azure Government, Azure Commercial, and GCP, including EKS, Terraform, Helm, CI/CD, FIPS validated endpoints, hardened images, secrets management, and centralized logging.\nWrite the infrastructure code yourself and set the standards for how it is written.\nDesign the automation that makes compliance a byproduct of how the system runs, covering continuous configuration validation, drift detection, evidence collection, and inventory accuracy.\nDecide how new platform capabilities land in the federal environment, and bring them in cleanly.\nOwn production health, monitoring, and incident response for the environment.\nOwn the FedRAMP program\nRun continuous monitoring end to end, including scanning, POA&M, inventory, and reporting.\nOwn the authorization artifacts, from the SSP and boundary diagrams through control implementation, and lead their move to OSCAL.\nAssess and categorize changes to the boundary, and own the notification process that goes with them.\nLead annual assessment and 3PAO engagements, from scoping through evidence to closing findings.\nBe Orca's interface to the FedRAMP PMO, our agency sponsor, and our assessors.\nTrack where the program is heading and tell us what it means for us early.\nRepresent Orca to federal customers\nBe the technical voice of our federal environment in front of agency security teams, prime contractors, and prospects, across security reviews, architecture deep dives, and audit responses.\nWork directly with our federal sales, sales engineering, and customer success teams. You will be in the rooms where a credible technical answer wins the account.\nTranslate between an agency ISSO and an R&D team in Tel Aviv, in both directions, so requirements arrive as something buildable.\nWho You Are:\nYou are hands on today and you want to stay that way. You are writing infrastructure code and operating production systems now, and you would be doing roughly two thirds of that in this role alongside the ownership and customer work.\nReal experience inside a FedRAMP authorized system. You can talk about an authorization boundary, a significant change, or what a 3PAO will ask for, from having done it.\n3 or more years in DevOps, SRE, or cloud infrastructure, with genuine production ownership.\nDeep AWS experience, including hands on AWS GovCloud and a clear understanding of how it differs from commercial.\nKubernetes in production. Operating it, debugging it, and upgrading it.\nTerraform and infrastructure as code at scale, 3 or more years.\nAutomation in Python or an equivalent language, with an instinct to script what others do by hand.\nFluency in NIST SP 800-53 Rev 5. You can move between a control and its real technical implementation in either direction.\nVulnerability management experience in a regulated environment.\nThe presence to hold a technical conversation with a federal customer's security team and be the reason they trust the answer. Excellent written and spoken English.\nBased in the United States, with access to the authorized environment subject to our federal personnel screening requirements.\nComfortable working with an Israel based R&D organization, with meaningful overlap with Israel hours.\nBonus Points:\nExperience with the FedRAMP 20x pathway, OSCAL tooling, or KSI based validation.\nExposure to DoD IL4 or IL5, StateRAMP, CMMC, or IRAP.\nExperience growing a small infrastructure team.\nCompliance automation tooling such as Xacta, Paramify, RegScale, or Vanta.\nBackground at a security product company or with a cloud native security platform.\nBachelor's degree in Computer Science or Computer Engineering, or equivalent hands on experience.\nWhat We Offer:\nCompetitive salary and equity package\nDiscounted medical, dental, and vision benefits with significant employer contribution\nBenefits coverage starting on your first day of employment\nGenerous PTO with U.S. holidays observed and flexible hybrid & remote work environments\nWork-from-home stipend to be used in your first month of employment\nMonthly reimbursement for cell phone and for home internet\nThe chance to collaborate with a team of talented global colleagues all around the world\nAnnual Salary range: $210,000 - $230,000. This represents the typical salary range for this position based on experience, skills, and other factors.\nThis position is open until filled. Applications will be accepted on an ongoing basis.\nOrca Security is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.\n#LI-ORCA\n#LI-Remote","description_format":"text","description_chars":7576,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-08-30T17:21:12Z"},{"event":"close","at":"2026-09-24T22:04:42Z"},{"event":"reopen","at":"2026-09-26T02:15:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":46,"band":"ok","label":"Likely open","p_open":1,"p_active":0.844,"p_room":0.55,"age_days":47,"expected_fill_days":43,"reasons":["conf:0","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":230000,"is_top_pay":true},"html_url":"https://alion.io/job/orca-security-devops-lead-fedramp","json_url":"https://alion.io/job/orca-security-devops-lead-fedramp.json","meta":{"generated_at":"2026-10-17T16:34:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22761,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5632},"rest":"https://alion.io/mcp/rest/get_company?id=5632"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Forca-security-devops-lead-fedramp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Forca-security-devops-lead-fedramp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Forca-security-devops-lead-fedramp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/orca-security-devops-lead-fedramp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Forca-security-devops-lead-fedramp"}]}