<div class="content-intro"><p>Now is an amazing time to join Nozomi Networks as we build the future of OT and IoT cybersecurity.</p> <p>We defend some of the world’s largest organizations and critical infrastructure in more than 68 countries and we’re just getting started. Our AI-powered cybersecurity platform secures operational technology (OT) and Internet of Things (IoT) infrastructures for enterprises and government entities across energy, manufacturing, transportation, resources, and critical infrastructure.</p></div><p class="p1">As we expand our product portfolio and our footprint in the US public sector, our Engineering department is hiring a Site Reliability Engineer to take ownership of our FedRAMP-authorized<br>environment. You will be the primary engineer responsible for the day-to-day reliability, security posture, and compliance operations of this environment — including patching, deployment, and continuous monitoring (ConMon) — working closely with our Switzerland-based SRE team and our Security & Compliance organization. This position carries a high degree of autonomy and responsibility: you will be the primary owner of the FedRAMP environment and the outcomes it depends on.</p> <p class="p1">You could be the next "Nozomier"! If this sounds like you, read on.</p> <h2 class="p1">In this role you will:</h2> <p>• Embody the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust<br>• Act as the primary owner of our FedRAMP environment, ensuring its availability, performance, and continuous compliance with the FedRAMP baseline<br>• Build and maintain the cloud infrastructure and related services within the FedRAMP authorization boundary (AWS GovCloud)<br>• Own the patching and vulnerability remediation lifecycle, meeting FedRAMP remediation SLAs (30/90/180 days by severity) and maintaining associated evidence<br>• Execute and improve the Continuous Monitoring (ConMon) program: monthly vulnerability scanning, POA&M creation and tracking, deviation requests, and monthly deliverables to our 3PAO and agency sponsors<br>• Manage deployments and change control within the boundary, ensuring changes follow the approved Configuration Management process and Significant Change Request procedures where<br>applicable<br>• Maintain system hardening against CIS/STIG benchmarks and FIPS-validated cryptography requirements<br>• Promote and implement automated solutions across application deployment, patching, evidence collection, and operational activities<br>• Troubleshoot issues across the entire stack, from network and OS to applications<br>• Support annual assessments and audits (3PAO), producing artifacts and demonstrating control implementation<br>• Drive post-incident analysis according to our no-blame culture, including incident reporting obligations to agency stakeholders and US-CERT/CISA where required<br>• Participate in periodic on-call duties for the FedRAMP environment<br>• Operate in settings with strong confidentiality and data privacy protocols</p> <h2 class="p1">To be successful in this opportunity, you will have:</h2> <div class="p1">• US citizenship or lawful permanent residency, with all work performed from within the United States, and the ability to pass applicable background investigations (per FedRAMP and agency<br>requirements)<br>• Proven professional experience as an SRE, DevOps, or Cloud engineer, including experience operating in a FedRAMP, FISMA, DoD IL, or similarly regulated environment<br>• Ability to work autonomously and communicate effectively in an async-first setup with a team based in a different time zone (Central European Time)<br>• Working knowledge of NIST SP 800-53 controls and the FedRAMP continuous monitoring process (scanning, POA&Ms, deviation requests, annual assessments)<br>• Strong hands-on experience with Kubernetes</div> <div class="p1">• Experience with Prometheus, Grafana and Consul<br>• Hands-on experience with AWS, ideally AWS GovCloud (US)<br>• Experience with vulnerability management tooling (e.g., Tenable/Nessus, Qualys) and interpreting scan results into actionable remediation plans<br>• Good knowledge and understanding of at least one programming language (Ruby, Python, Go)<br>• Experience defining infrastructure as code using tools such as Terraform or CloudFormation<br>• Experience in the definition of CI/CD pipelines using technologies like Jenkins, GitHub Actions, or similar<br>• Demonstrable experience using AI-enabled tools as part of day-to-day work to improve efficiency, quality, or decision-making, while applying sound professional judgement and maintaining<br>accountability for outputs — within the constraints of a regulated environment</div> <p class="p1"><strong>Nice to have</strong><br>• Experience preparing for or maintaining a FedRAMP Authorization to Operate (ATO), including SSP contributions and control narratives<br>• Familiarity with STIG/CIS hardening automation (e.g., Ansible, OpenSCAP)<br>• Familiarity with SIEM/log aggregation and audit log retention requirements in federal environments<br>• Experience working with 3PAOs, agency ISSOs/ISSMs, or the FedRAMP PMO<br>• Relevant certifications (e.g., AWS certifications, CISSP, Security+, CKA)</p> <p class="p1">Nozomi Networks is committed to fair and equitable compensation practices. The base pay scale for this position is <span class="collapsed-field-text">$155,584 - $199,012</span>. This is the range the company reasonably and in good faith expects to