Senior Federal Platform Engineer

Remote, US·Posted today
zkcybersecuritypythonkubernetesawsterraform
<p><strong>Description</strong></p> <p>Keeper Security is hiring a Senior Federal Platform Engineer to support the deployment, operation, and sustainment of Keeper solutions across U.S. Government environments, including IL5, IL6, and classified networks. This is a 100% remote position with travel as needed.</p> <p>Keeper’s cybersecurity software is trusted by millions of people and thousands of organizations globally. Keeper is published in 23 languages and sold in over 150 countries. Join one of the fastest-growing cybersecurity companies and help deliver secure, reliable, and compliant platform operations for mission-critical federal environments.</p> <p><strong>About Keeper</strong></p> <p>Keeper Security is a leading cybersecurity software company that protects thousands of organizations and millions of people in more than 150 countries. Keeper delivers a powerful zero-trust and zero-knowledge solution built to meet the stringent requirements of federal IT environments. Its flagship offering, KeeperPAM®, is an AI-enabled, cloud-native platform that protects users, devices, and critical infrastructure from cyber attacks. Recognized in the Gartner® Magic QuadrantTM for Privileged Access Management (PAM), Keeper combines robust compliance with unmatched visibility and control. With industry-leading certifications, including FedRAMP High and GovRAMP Moderate Authorization, Keeper provides the security assurance public sector organizations require. Learn why federal agencies, including NASA and the DOJ, trust Keeper to defend against today’s sophisticated adversaries at <a href="http://keepersecurity.com">KeeperSecurity.com</a>.&nbsp;&nbsp;&nbsp;&nbsp;</p> <p><strong>About the Role</strong></p> <p>The Senior Federal Platform Engineer will be responsible for the hands-on delivery, deployment, automation, and sustainment of Keeper solutions in high-security U.S. Government environments. This role combines DevOps, platform engineering, release engineering, and site reliability responsibilities, with a strong focus on restricted and controlled environments. You will build and maintain deployment pipelines, automate infrastructure, support release and cutover activities, troubleshoot production issues, and help ensure systems remain secure, reliable, and audit-ready across IL5, IL6, and classified deployments. The ideal candidate is comfortable operating in environments where change control is strict, access is limited, and operational rigor is critical.</p> <p><strong>Responsibilities</strong></p> <ul> <li>Build, maintain, and improve CI/CD pipelines and automated deployment workflows for federal environments</li> <li>Support software releases, deployment execution, cutovers, validation, rollback planning, and post-release monitoring across IL5, IL6, and classified networks</li> <li>Automate infrastructure provisioning and configuration using Terraform, Ansible, CloudFormation, or similar infrastructure-as-code tools</li> <li>Maintain hardened infrastructure, configuration baselines, patching processes, and operational controls for restricted environments</li> <li>Troubleshoot complex deployment, infrastructure, application, and platform issues in coordination with Engineering and Security teams</li> <li>Build and maintain logging, monitoring, alerting, and operational telemetry to improve system visibility and reliability</li> <li>Support incident response, recovery, postmortems, and corrective actions for federal platform environments</li> <li>Partner with Engineering, QA, Security, and Product teams to improve deployment readiness, operability, and release quality</li> <li>Maintain runbooks, deployment documentation, operational procedures, and configuration records for federal systems</li> <li>Support continuous monitoring, audit readiness, and authorization activities by producing required technical evidence and artifacts</li> <li>Assist with vulnerability remediation, security hardening, compliance drift detection, and system configuration validation</li> <li>Use AI-assisted tools such as Claude, ChatGPT, GitHub Copilot, or similar platforms to improve automation, troubleshooting, documentation, scripting, and operational efficiency</li> </ul> <p><strong>Requirements</strong></p> <ul> <li>7+ years of experience in DevOps, Platform Engineering, SRE, Release Engineering, Infrastructure Engineering, or a related technical role</li> <li>Hands-on experience deploying and operating systems in IL5, IL6, FedRAMP High, classified, or similarly restricted government environments</li> <li>Strong experience with CI/CD pipelines, release automation, deployment workflows, and production change management</li> <li>Strong experience with infrastructure-as-code tools such as Terraform, CloudFormation, Ansible, or similar</li> <li>Experience with AWS GovCloud and/or Azure Government</li> <li>Proficiency in scripting and automation using Python, Bash, PowerShell, or similar languages</li> <li>Strong understanding of secure configuration, patching, logging, access control, and operational hardening practices</li> <li>Experience with observability, including logs, metrics, alerting, and production troubleshooting</li> <li>Familiarity with federal security and compliance frameworks such as FedRAMP, NIST 800-53, RMF, DoD Cloud Computing SRG, and related operational controls</li> <li>Experience working in environments with strict change control, limited access, and formal release processes</li> <li>Strong troubleshooting skills and the ability to diagnose issues across infrastructure, applications, networking, and deployment pipelines</li> <li>Ability and willingness to use AI-assisted tools effectively to support scripting, automation, troubleshooting, documentation, and operational analysis</li> <li>Ability to obtain and maintain a Top Secret clearance</li> <li>Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience</li> <li>Keeper is FedRAMP authorized; therefore all applicants must be a U.S. Person</li> </ul> <p>Preferred Qualifications</p> <ul> <li>Experience supporting IL6 or classified deployments</li> <li>Experience operating Kubernetes or containerized workloads in high-compliance environments</li> <li>Experience with DISA STIGs, CIS benchmarks, or automated security hardening</li> <li>Familiarity with secrets management, PAM, IAM, or zero-trust architectures</li> <li>Experience supporting continuous monitoring, vulnerability management, or audit evidence collection</li> <li>Experience working directly with government agencies, primes, integrators, or mission partners</li> </ul> <p><strong>Benefits</strong></p> <ul> <li>Medical, Dental &amp; Vision (inclusive of domestic partnerships)</li> <li>Employer Paid Life Insurance &amp; Employee/Spouse/Child Supplemental life</li> <li>Voluntary Short/Long Term Disability Insurance</li> <li>401K (Roth/Traditional)</li> <li>A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc)</li> <li>Above market annual bonuses</li> </ul> <p>Keeper Security, Inc. is an equal opportunity employer and participant in the U.S. Federal E-Verify program. We celebrate diversity and are committed to creating an inclusive environment for all employees.</p> <p>Classification: <strong>Exempt</strong></p><div class="content-conclusion"><p>&nbsp;</p> <p class="pf0"><strong><span class="cf0">Keeper Candidate Privacy Notice</span></strong></p> <p class="pf0"><span class="cf1">This notice explains how Keeper Security processes your personal data during recruitment. Depending on the role and location, the Controller of personal data (the organization responsible for determining why and how personal data is processed) will be Keeper Security Inc. (US), Keeper Security EMEA Ltd. (Ireland), or Keeper Security APAC K.K (Japan).</span></p> <p class="pf0"><span class="cf1"> 1. </span><strong><span class="cf0">Data We Collect</span></strong></p> <p class="pf0"><span class="cf1">Information You provide:</span></p> <ul> <li class="pf1"><span class="cf1">Contact details, CV/resume, cover letter</span></li> <li class="pf1"><span class="cf1">Employment history, qualifications, work eligibility</span></li> <li class="pf1"><span class="cf1">Application responses and uploaded documents</span></li> </ul> <p class="pf0"><span class="cf1">Information We generate:</span></p> <ul> <li class="pf1"><span class="cf1">Interview notes, assessments, communications</span></li> <li class="pf1"><span class="cf1">Scheduling information</span></li> </ul> <p class="pf0"><span class="cf1">Information From Others:</span></p> <ul> <li class="pf1"><span class="cf1">Recruiter/referral information who submit your profile</span></li> <li class="pf1"><span class="cf1">References (with your consent, before final offer)</span></li> <li class="pf1"><span class="cf1">Public professional profiles</span></li> <li class="pf1"><span class="cf1">Background verification (post offer)</span></li> </ul> <p class="pf0"><span class="cf1"> Voluntary Diversity and Equal Opportunity Information</span></p> <ul> <li class="pf1"><span class="cf1">We may ask you to voluntarily provide diversity information including race/ethnicity, gender, disability status and veteran status (US). Providing this information is optional and Keeper collects this data in order to comply with EEOC and similar requirements</span></li> </ul> <p class="pf0"><span class="cf1"> 2. </span><strong><span class="cf0">How We Use Your Data</span></strong></p> <ul> <li class="pf1"><span class="cf1">Assess your application and suitability</span></li> <li class="pf1"><span class="cf1">Manage interviews and recruitment workflow</span></li> <li class="pf1"><span class="cf1">Consider you for other/future roles (we may seek your consent to keep your information on our systems beyond the retention period specified)</span></li> <li class="pf1"><span class="cf1">Comply with employment law obligations</span></li> </ul> <p class="pf0"><span class="cf1"> 3. </span><strong><span class="cf0">Legal Basis</span></strong></p> <ul> <li class="pf1"><span class="cf1">Legitimate Interests (recruitment management, security and integrity of the hiring process)</span></li> <li class="pf1"><span class="cf1">Contracting steps (for progressed candidates)</span></li> <li class="pf1"><span class="cf1">Legal and regulatory compliance obligations; explicit consent where required</span></li> </ul> <p class="pf0"><span class="cf1"> 4. </span><strong><span class="cf0">Who We Share Information With</span></strong></p> <p class="pf0"><span class="cf1">Internal: </span></p> <ul> <li class="pf1"><span class="cf1">HR, hiring managers, interviewers*, IT support for system administration</span></li> </ul> <p class="pf0"><span class="cf1">*Note - diversity and equal opportunity data is not shared with hiring managers.</span></p> <p class="pf0"><span class="cf1">Third Parties:</span></p> <p class="pf0"><span class="cf1">Service providers who assist with:</span></p> <ul> <li class="pf1"><span class="cf1">Applicant tracking, recruitment systems and assessment providers</span></li> <li class="pf1"><span class="cf1">Background verification vendors (post offer)</span></li> <li class="pf1"><span class="cf1">Recruitment agencies (where applicable)</span></li> <li class="pf1"><span class="cf1">Tools to support communication, collaboration and to securely store your data</span></li> </ul> <p class="pf0"><span class="cf1">Keeper ensures that all our third parties are contractually bound to protect your personal data with adequate safeguards in place.</span></p> <p class="pf0"><span class="cf1"> 5. </span><strong><span class="cf0">International Transfers</span></strong></p> <p class="pf0"><span class="cf1">Your data may be accessed by Keeper entities globally as needed for the purposes of hiring and decision making. We protect any such data transfer between Keeper entities using appropriate safeguards under applicable data protection laws. </span></p> <p class="pf0"><span class="cf1">6. </span><strong><span class="cf0">Security</span></strong></p> <p class="pf0"><span class="cf1">We implement appropriate technical and organizational measures to protect your data, consistent with our industry leading security standards.</span></p> <p class="pf0"><span class="cf1">7. </span><strong><span class="cf0">Retention</span></strong></p> <p class="pf0"><span class="cf1">We keep your data for 24 months from your last application activity, then delete or anonymize it. </span></p> <p class="pf0"><span class="cf1">Exceptions:</span></p> <ul> <li class="pf1"><span class="cf1">You opt into our talent database for further retention by providing consent (extended retention)</span></li> <li class="pf1"><span class="cf1">You're hired (transfers to employee records)</span></li> </ul> <p class="pf0"><span class="cf1"> 8. </span><strong><span class="cf0">Your Rights</span></strong></p> <p class="pf0"><span class="cf1">You have the following rights and can contact us at the email below to exercise them:</span></p> <ul> <li class="pf1"><span class="cf1">Access, correct, or delete your data, subject to applicable law and retention requirements</span></li> <li class="pf1"><span class="cf1">Object to or restrict processing</span></li> <li class="pf1"><span class="cf1">Withdraw consent (where applicable)</span></li> <li class="pf1"><span class="cf1">Request data portability</span></li> <li class="pf1"><span class="cf1">Lodge a complaint with your data protection authority</span></li> </ul> <p class="pf0"><span class="cf1">If you become an employee, your rights regarding your employee record are governed by our internal Employee Privacy Notice and certain data will be retained as required under relevant laws such as employment or tax law.&nbsp;</span></p> <p class="pf0"><span class="cf1">When you request access to your personal data, some information may be redacted if it includes the personal data of other individuals or information that we must protect in order to preserve their privacy rights.</span></p> <p class="pf0"><span class="cf1"> 9. </span><strong><span class="cf0">Automated Decisions</span></strong></p> <p class="pf0"><span class="cf1">Keeper does not make hiring decisions using solely automated processing.</span></p> <p class="pf0"><span class="cf1">10. </span><strong><span class="cf0">Contact</span></strong><span class="cf1"> - Candidates can send privacy questions to: privacy@keepersecurity.com</span></p> <p>&nbsp;</p></div>