Senior DevOps / Cloud Infrastructure Engineer

Requirements:

• At least 5 years of experience in DevOps, SRE, or cloud infrastructure engineering, including end-to-end ownership of production systems.
• Experience implementing or operating compliance-framework controls and supporting audits.
• Strong hands-on production experience with Google Cloud and Terraform or comparable infrastructure-as-code tools.
• Production experience with Docker and container platforms such as Cloud Run or Kubernetes/GKE.
• Experience designing CI/CD pipelines and using security tools; GitLab CI experience is preferred.
• Knowledge of networking, identity and access management, encryption, and key management.
• Experience securing multi-tenant SaaS architectures.
• Scripting or programming ability in Python, Go, Bash, or TypeScript.
• Strong written communication skills, including writing audit-ready control narratives and practical engineering runbooks.
• U.S. citizenship is required; an active security clearance is a plus.
• Preferred: experience with FedRAMP authorization or continuous monitoring, NIST SP 800-53 controls, 3PAOs, OSCAL, automated compliance platforms, or frameworks such as SOC 2, StateRAMP/GovRAMP, CMMC, and DoD Impact Levels IL4/IL5.
• Preferred: familiarity with Google Cloud Assured Workloads or other FedRAMP-authorized GCP services.
• Preferred: experience in aerospace, space launch, defense, or other safety-critical industries, including familiarity with ITAR and export-controlled data.
• Preferred: production Postgres operations, including backups, replication, encryption, and performance; Node.js/TypeScript services and pnpm monorepo tooling; relevant security or Google Cloud certifications; or early-stage startup experience building an infrastructure function.

Responsibilities:

• Lead technical delivery of our FedRAMP 20x Class C authorization, including defining system boundaries and implementing Google Cloud controls such as Assured Workloads.
• Implement and maintain infrastructure controls for our ISO 27001 ISMS and support internal and external audits.
• Design secure multi-tenant isolation, including network segmentation, tenant data separation, encryption, and key management with Cloud KMS and CMEK.
• Build and manage infrastructure as code with Terraform, policy-as-code guardrails, and drift detection.
• Strengthen and extend GitLab CI/CD pipelines with security testing, dependency and container scanning, image signing, SBOMs, and gated environment promotion.
• Own observability and security monitoring, including centralized logging, audit trails, alerting, and SIEM integration.
• Manage vulnerability remediation and patching to FedRAMP timelines, and track findings through POA&Ms.
• Automate compliance evidence collection so audits can use system-generated evidence rather than screenshots.
• Define and test backup, disaster recovery, and incident response procedures.
• Manage least-privilege IAM, including privileged access, service accounts, and access reviews.
• Partner with engineering to establish secure defaults and document architecture and runbooks.

Technologies:

• Bash
• CI/CD
• Cloud
• DevOps
• Docker
• GCP
• GitLab
• IAM
• Support
• Kubernetes
• Network
• pnpm
• Phoenix
• Python
• Security
• Terraform
• TypeScript
• NodeJS
• REST

More

We are Phase Zero Space Technologies, an early-stage Phoenix startup developing a patent-pending safety compliance management system for space launches. Our multi-tenant SaaS platform helps launch providers, range operators, and public-sector partners plan, track, and demonstrate compliance with launch safety requirements. Because our customers include regulated and government organizations, security and compliance are central to our product. We are hiring our first dedicated DevOps / Cloud Infrastructure Engineer to build the platforms path to FedRAMP authorization and ISO 27001 certification. You will work closely with our full-stack engineers and leadership and have meaningful influence over how we build. Our current stack includes containerized services on Google Cloud Run, GitLab CI, Postgres, and Google Identity Platform. This is a full-time, hybrid-only role in Phoenix, Arizona, with a minimum base salary of $150,000 per year. Youll establish our infrastructure and compliance foundation from the ground up, contribute to software that supports the safety of launches, crews, and the public, and join a small team where your decisions have a direct impact. We are an equal opportunity employer and consider qualified applicants without regard to protected characteristics. Applicants are asked to submit a resume through Indeed with a short note describing a compliance effort they contributed to and what they owned.

last updated 43 week of 2026