Smartsheet is a company that has been helping teams achieve their goals for over 20 years by providing scalable solutions. They are seeking a Software Engineer II to join their Security Engineering team, focusing on building secure and reliable software systems while ensuring compliance with FedRAMP requirements.
Responsibilities:
- Support FedRAMP compliance: You will work to ensure that platform and service architecture meets FedRAMP program requirements, including developing architecture diagrams and documents and communicating updated guidelines and directives to internal stakeholders
- Learn and Build Secure Infrastructure: Under the guidance of senior engineers, you will assist in designing and maintaining secure infrastructure on EKS in our multi-cloud environment (AWS) using Infrastructure as Code (Terraform)
- Automate Security & Workflows: You will write code (Python, Go, or Bash) to automate manual tasks, threat detection, and vulnerability management processes
- Secure the Pipeline: You will help integrate security tools (SAST, DAST, SCA) into our CI/CD pipelines, ensuring developers receive fast, actionable feedback on their code
- Support Container Operations: You will gain hands-on experience managing and securing our container orchestration platform (Kubernetes/EKS) and self-hosted GitLab Runners
- Collaborate and Grow: You will participate in code reviews, technical discussions, and blameless post-mortems to learn operational excellence and security best practices
Requirements:
- US Person Status: Must be a U.S. Citizen, U.S. National to meet federal compliance requirements
- Education: A BS or MS in Computer Science, Engineering, or a related field (or equivalent capability)
- Foundational Coding Skills: Proficiency in at least one modern programming or scripting language, such as Python, Go, Java, or Bash
- Cloud Curiosity: A basic understanding of cloud concepts (AWS preferred) and a strong desire to learn Infrastructure as Code (Terraform)
- Security Mindset: Familiarity with basic security concepts (e.g., OWASP Top 10) or a strong interest in the cybersecurity landscape
- Problem Solving: A critical thinker who enjoys troubleshooting complex technical problems and wants to understand how large-scale systems work
- Communication: Excellent verbal and written communication skills and a collaborative spirit
- Previous internship experience in DevOps, SRE, Platform Engineering, or Software Engineering
- Experience with Linux/Unix command line
- Personal projects or coursework involving Docker, Kubernetes, or CI/CD pipelines (GitLab/GitHub)
- Basic understanding of networking concepts (HTTP, DNS, TCP/IP)