Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 59 days agoWe saw it 1 min after it went up

DevOps Lead (FedRAMP)

Orca Security8 open roles

Pay
$230,000 – $260,000 a year
Where
United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDevOps Lead (FedRAMP)Orca Security · United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Orca Security's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.4% of postings close within 7 days. Measured by our own scanner across the market. Orca Security postings stay open a median of 36 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.4%7 days
  4. 20.0%14 days
  5. 35.5%30 days
  6. 58.6%60 days
This job: posted 59 days ago

Orca Security median: 36 days open

The posting

Location: East Coast, US (Remote)

Big Ideas. Real People.

At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.

We’re looking for driven and talented people like you to join our team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?

Highlights:

  • High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
  • Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
  • Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
  • Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.

About the Role:

The DevOps Lead (FedRAMP) will own Orca's FedRAMP environment. All of it. The infrastructure, the authorization, and the relationships with the agencies and assessors who depend on it.

This is a builder's role with real authority. You will be the most senior Orca engineer in our federal environment and the person everyone comes to for anything that touches it, from a Terraform change to an agency security review. You will set the technical direction, and you will implement it yourself. Over time you will grow a small US based team around you while keeping your own hands on the system.

The timing is good. FedRAMP is moving to 20x, with machine readable OSCAL packages, Key Security Indicators, and continuous validation replacing point in time assessment. Most companies are treating that as a compliance problem. We want to treat it as an automation problem, and you will be the one who designs how Orca does it.

If you like being the definitive expert on a system that matters, and you want the ownership without giving up the engineering, this is a rare shape of role.

What You'll Do:

Build and operate the federal environment

  • Own and evolve Orca's FedRAMP environment in AWS GovCloud, AWS East/West, Azure Government, Azure Commercial, and GCP, including EKS, Terraform, Helm, CI/CD, FIPS validated endpoints, hardened images, secrets management, and centralized logging.
  • Write the infrastructure code yourself and set the standards for how it is written.
  • Design the automation that makes compliance a byproduct of how the system runs, covering continuous configuration validation, drift detection, evidence collection, and inventory accuracy.
  • Decide how new platform capabilities land in the federal environment, and bring them in cleanly.
  • Own production health, monitoring, and incident response for the environment.

Own the FedRAMP program

  • Run continuous monitoring end to end, including scanning, POA&M, inventory, and reporting.
  • Own the authorization artifacts, from the SSP and boundary diagrams through control implementation, and lead their move to OSCAL.
  • Assess and categorize changes to the boundary, and own the notification process that goes with them.
  • Lead annual assessment and 3PAO engagements, from scoping through evidence to closing findings.
  • Be Orca's interface to the FedRAMP PMO, our agency sponsor, and our assessors.
  • Track where the program is heading and tell us what it means for us early.

Represent Orca to federal customers

  • Be the technical voice of our federal environment in front of agency security teams, prime contractors, and prospects, across security reviews, architecture deep dives, and audit responses.
  • Work directly with our federal sales, sales engineering, and customer success teams. You will be in the rooms where a credible technical answer wins the account.
  • Translate between an agency ISSO and an R&D team in Tel Aviv, in both directions, so requirements arrive as something buildable.

Who You Are:

  • You are hands on today and you want to stay that way. You are writing infrastructure code and operating production systems now, and you would be doing roughly two thirds of that in this role alongside the ownership and customer work.
  • Real experience inside a FedRAMP authorized system. You can talk about an authorization boundary, a significant change, or what a 3PAO will ask for, from having done it.
  • 3 or more years in DevOps, SRE, or cloud infrastructure, with genuine production ownership.
  • Deep AWS experience, including hands on AWS GovCloud and a clear understanding of how it differs from commercial.
  • Kubernetes in production. Operating it, debugging it, and upgrading it.
  • Terraform and infrastructure as code at scale, 3 or more years.
  • Automation in Python or an equivalent language, with an instinct to script what others do by hand.
  • Fluency in NIST SP 800-53 Rev 5. You can move between a control and its real technical implementation in either direction.
  • Vulnerability management experience in a regulated environment.
  • The presence to hold a technical conversation with a federal customer's security team and be the reason they trust the answer. Excellent written and spoken English.
  • Based in the United States, with access to the authorized environment subject to our federal personnel screening requirements.
  • Comfortable working with an Israel based R&D organization, with meaningful overlap with Israel hours.

Bonus Points:

  • Experience with the FedRAMP 20x pathway, OSCAL tooling, or KSI based validation.
  • Exposure to DoD IL4 or IL5, StateRAMP, CMMC, or IRAP.
  • Experience growing a small infrastructure team.
  • Compliance automation tooling such as Xacta, Paramify, RegScale, or Vanta.
  • Background at a security product company or with a cloud native security platform.
  • Bachelor's degree in Computer Science or Computer Engineering, or equivalent hands on experience.

What We Offer:

  • Competitive salary and equity package
  • Discounted medical, dental, and vision benefits with significant employer contribution
  • Benefits coverage starting on your first day of employment
  • Generous PTO with U.S. holidays observed and flexible hybrid & remote work environments
  • Work-from-home stipend to be used in your first month of employment
  • Monthly reimbursement for cell phone and for home internet
  • The chance to collaborate with a team of talented global colleagues all around the world

Annual Salary range: $210,000 - $230,000. This represents the typical salary range for this position based on experience, skills, and other factors.

This position is open until filled. Applications will be accepted on an ongoing basis.

Orca Security is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.

#LI-ORCA

#LI-Remote

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Orca Security's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Orca Security's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Orca Security's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.