BeyondTrust is a cybersecurity SaaS company creating a safer world through its identity security portfolio.
Culture of flexibility, trust, and continual learning.
Responsibilities
Own the AWS GovCloud landing zone for new product environments: multi-account structure, SCPs and guardrails, logging and security-tooling accounts, IaC-native provisioning
Own the continuous-compliance evidence pipeline: collection, normalization, and reporting of FedRAMP 20x Key Security Indicators
Own FedRAMP continuous monitoring obligations for the covered environments
Own the CI/CD pipelines the GovCloud environments require (build, signing, artifact management, quality and security gates) and cloud cost visibility
Own the production change process, including change request governance, access controls, and approval standards
Own release and update machinery for cloud fleets: mandatory security updates, staged and jittered rollout windows, cluster-coordinated installs, and patch verification
Own the incident management process, tooling, on-call design, and post-incident review cadence
Drive the automated environment promotion path from development through staging to production
Run intake and prioritization for operational requests from feature teams and leadership
Lead a team of DevOps, SRE, and security automation engineers
Partner with the VP of Application Engineering on workforce planning, hiring, role design, and onboarding
Requirements
Staff-level technical depth: able to critically review Terraform, pipeline definitions, and architecture proposals
Real people-management experience: hired, grown, and run a small SRE or DevOps team
Experience building and operating AWS GovCloud environments