Software Engineer II, FedRamp (Remote Eligible)

Smartsheet is a company that has been helping teams achieve their goals for over 20 years by providing scalable solutions. They are seeking a Software Engineer II to join their Security Engineering team, focusing on building secure and reliable software systems while ensuring compliance with FedRAMP requirements.

Responsibilities:

• Support FedRAMP compliance: You will work to ensure that platform and service architecture meets FedRAMP program requirements, including developing architecture diagrams and documents and communicating updated guidelines and directives to internal stakeholders
• Learn and Build Secure Infrastructure: Under the guidance of senior engineers, you will assist in designing and maintaining secure infrastructure on EKS in our multi-cloud environment (AWS) using Infrastructure as Code (Terraform)
• Automate Security & Workflows: You will write code (Python, Go, or Bash) to automate manual tasks, threat detection, and vulnerability management processes
• Secure the Pipeline: You will help integrate security tools (SAST, DAST, SCA) into our CI/CD pipelines, ensuring developers receive fast, actionable feedback on their code
• Support Container Operations: You will gain hands-on experience managing and securing our container orchestration platform (Kubernetes/EKS) and self-hosted GitLab Runners
• Collaborate and Grow: You will participate in code reviews, technical discussions, and blameless post-mortems to learn operational excellence and security best practices

Requirements:

• US Person Status: Must be a U.S. Citizen, U.S. National to meet federal compliance requirements
• Education: A BS or MS in Computer Science, Engineering, or a related field (or equivalent capability)
• Foundational Coding Skills: Proficiency in at least one modern programming or scripting language, such as Python, Go, Java, or Bash
• Cloud Curiosity: A basic understanding of cloud concepts (AWS preferred) and a strong desire to learn Infrastructure as Code (Terraform)
• Security Mindset: Familiarity with basic security concepts (e.g., OWASP Top 10) or a strong interest in the cybersecurity landscape
• Problem Solving: A critical thinker who enjoys troubleshooting complex technical problems and wants to understand how large-scale systems work
• Communication: Excellent verbal and written communication skills and a collaborative spirit
• Previous internship experience in DevOps, SRE, Platform Engineering, or Software Engineering
• Experience with Linux/Unix command line
• Personal projects or coursework involving Docker, Kubernetes, or CI/CD pipelines (GitLab/GitHub)
• Basic understanding of networking concepts (HTTP, DNS, TCP/IP)