Staff Infrastructure Security Engineer (USA)

GitLab
United States
Workplace: RemoteFull timeUSD 168,000 - 238,000 annuallyFunction: CybersecuritySkills: ["Written communication","Verbal communication","Mentoring","Technical leadership","Inclusive collaboration"]

Lead infrastructure security for a FedRAMP environment supporting GitLab Dedicated for Government, owning the security posture and setting technical direction, architectural patterns, and foundational security automation. Drive initiatives from problem framing through delivery across FedRAMP continuous monitoring and authorization-impacting changes, run threat modeling and security reviews, and mentor engineers while influencing how patterns extend to other Dedicated and Self-Managed platforms.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
GitLab
GitLab
3 days ago

Staff Infrastructure Security Engineer (USA)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 20 hours agoStatus: Live

Job Summary

Lead infrastructure security for a FedRAMP environment supporting GitLab Dedicated for Government, owning the security posture and setting technical direction, architectural patterns, and foundational security automation. Drive initiatives from problem framing through delivery across FedRAMP continuous monitoring and authorization-impacting changes, run threat modeling and security reviews, and mentor engineers while influencing how patterns extend to other Dedicated and Self-Managed platforms.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Set technical direction, architectural patterns, reference implementations, and foundational security automation for infrastructure security in the FedRAMP environment.
  • •Own the security posture of the FedRAMP environment as the senior technical voice, partnering with the Public Sector SRE team.
  • •Lead infrastructure security initiatives across delivery, scoping ambiguous multi-quarter work, including FedRAMP continuous monitoring, control implementation, and authorization-impacting changes.
  • •Conduct comprehensive security reviews and threat modeling for complex Federal infrastructure components, identifying systemic risks and driving remediation.
  • •Serve as an authoritative technical voice across stakeholders, translating tradeoffs and FedRAMP control implications into clear decisions, and mentor engineers.

Pay and Benefits

Salary: USD 168,000 - 238,000 annually
Equity and Bonus:Equity
Perks:Paid LeaveEquityParental LeaveLearning Budget

Key Requirements

  • •Proof of U.S. citizenship and U.S. residency.
  • •Expertise securing cloud infrastructure (AWS/GCP/Azure) and Kubernetes-based container orchestration.
  • •Deep working knowledge of FedRAMP (Moderate and/or High) and operational realities of running and continuously monitoring an authorized environment.
  • •Proficiency in programming languages (Go, Python, Ruby) delivering production-quality security tooling.
  • •Experience with Infrastructure-as-Code security (Terraform, Ansible, CloudFormation), policy-as-code, and automated compliance for regulated environments.
Experience:DevSecOpsFedRAMPRegulated environmentsCloud infrastructure
Skills:Written communicationVerbal communicationMentoringTechnical leadershipInclusive collaboration
Tech Stack:AWSGCPAzureKubernetesGoPythonRubyTerraformAnsibleCloudFormationFedRAMPNIST 800-53FIPS 140-2/3ISO 27001SOC 2PCI-DSSPolicy-as-codeAutomated compliance

Eligibility

Nationality:US National

Company Brief

GitLab
Provides a single application for the complete DevSecOps lifecycle, offering source code management, CI/CD, security, and collaboration tools to help teams deliver software faster and more securely.
Industry: Developer Tools
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2011
WebsiteLinkedIn