Citi

Job Title:DevOps Engineer – AKS & FedRAMP Compliance
Location: Houston, Texas (Onsite, 5 Days a Week — No Hybrid or Remote)

Position Overview

Position Overview:

We are seeking a skilled DevOps Engineer to support the secure deployment and maintenance of applications within our Azure Kubernetes Service (AKS) environment. This role focuses on implementing and maintaining FedRAMP High compliant pipelines and systems in accordance with NIST SP 800-53 Revision 5.

You will work closely with another DevOps Engineer to operationalize and enforce FedRAMP Moderate and High technical controls across AKS, Azure DevOps, and supporting cloud services. This position requires hands-on experience with PostgreSQL, Docker image lifecycle management, and secure automation practices in Microsoft Azure. The DevOps Engineer must also support the build and maintenance of five distinct environments: Development, QA, Test, Production, and Hot Standby Disaster Recovery.

Key Responsibilities:

• Build, harden, and maintain Docker images deployed into AKS that comply with FedRAMP High and NIST 800-53r5 controls.
• Develop and maintain five environments (Dev, QA, Test, Production, and Hot Standby Disaster Recovery), ensuring consistency, security, and performance across each.
• Collaborate with the DevOps team to implement and maintain secure Azure DevOps CI/CD pipelines.
• Apply security-first DevSecOps practices throughout the software build and release lifecycle, including integration with static code analysis and image compliance checks.
• Configure and maintain PostgreSQL databases in secure, production-grade environments, ensuring encryption, backup, access control, and auditing requirements are met.
• Support the configuration and continuous monitoring of Azure services such as Defender for Cloud, Azure Policy, Log Analytics, Key Vault, and identity/access management.
• Work alongside security and compliance teams to ensure all deployments and environments maintain required control baselines and are audit-ready.
• Support automation and secure management of system configurations using scripting tools such as PowerShell, Bash, or Python.
• Document and communicate DevOps processes and secure system architectures to aid in internal audits and FedRAMP compliance reporting.

Qualifications:

Required:

• 3+ years of DevOps or Site Reliability Engineering experience in cloud-native environments.
• Strong expertise with AKS, Docker, and Azure DevOps pipelines.
• Demonstrated understanding of FedRAMP Moderate/High environments and NIST 800-53r5 technical controls.
• Proven experience managing multiple environments across the software development lifecycle (Dev, QA, Test, Production, Disaster Recovery).
• Hands-on experience managing and securing PostgreSQL databases.
• Strong scripting experience with PowerShell, Bash, or Python.
• Familiarity with Azure services related to identity, monitoring, and security.

Preferred:

• Experience operating in an environment with a FedRAMP ATO.
• Certifications such as Microsoft Certified: Azure DevOps Engineer, Certified Kubernetes Administrator (CKA), or ISC² Certified in Cybersecurity (CC).
• Experience working collaboratively with security, audit, and compliance stakeholders.

Soft Skills:

• Security-first mindset with strong attention to detail.
• Excellent communication and documentation skills.
• Team player with a proactive approach to problem-solving and continuous improvement.

Working Conditions:

• U.S. Citizenship is required due to FedRAMP compliance mandates.

Job Type: Full-time

Pay: $75,000.00 - $95,000.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance

Compensation Package:

• Yearly pay

Schedule:

• Day shift
• Monday to Friday

Ability to Commute:

• Houston, TX 77060 (Required)

Work Location: In person