DevOps Engineer (GovCloud/FedRAMP)

Varonis is a data security company whose cloud-native platform protects enterprise data across SaaS, IaaS, and hybrid cloud environments. The company is seeking an experienced DevOps Engineer to build and operate secure, scalable AWS GovCloud infrastructure supporting FedRAMP requirements, automation, reliability, monitoring, and incident response.

Responsibilities:

• Design, build, and maintain scalable AWS infrastructure with a focus on high availability and fault tolerance
• Design and configure ECS scaling strategies
• Optimize, monitor, and automate Amazon RDS (PostgreSQL) performance, backups, and failover strategies
• Implement disaster recovery plans, backup solutions, and system restoration procedures
• Develop and maintain infrastructure-as-code (IaC) using Terraform or CloudFormation
• Create monitoring and alerting systems using CloudWatch, Prometheus, Grafana, or Datadog
• Enhance CI/CD pipelines to improve deployment automation and system resilience
• Perform incident management, troubleshoot production issues, and conduct post-mortems
• Collaborate with engineering teams to ensure best practices in application reliability and performance
• Stay up-to-date with AWS services and industry best practices to drive continuous improvement

Requirements:

• 3+ years of experience in DevOps, SRE, or Cloud Engineering roles
• Hands-o experience operating production workloads in AWS GovCloud, including supporting a FedRAMP Moderate (or higher) authorization boundary, Terraform-managed infrastructure, evidence collection, and control implementation in a regulated environment
• Previous experience in a high-scale, production environment
• Strong expertise in AWS services, particularly EC2, ECS, RDS, S3, IAM, and VPC
• Knowledge of event-driven architectures using AWS Lambda and SNS/SQS
• Hands-on experience managing databases in production environments
• Proficiency in Terraform, CloudFormation, or CDK for infrastructure automation
• Experience with containerization (Docker, ECS, Kubernetes)
• Solid understanding of Linux systems, networking, and security best practices
• Proficiency in scripting (Python or Bash) for automation
• Strong troubleshooting and incident response skills
• Experience with monitoring and logging tools like CloudWatch, Prometheus, Grafana, or Datadog