Responsibilities

FedRAMP & Government Compliance Engineering. Architect and maintain cloud infrastructure aligned with FedRAMP High(Class D), NIST SP 800-53, and DoD Impact Level (IL4/IL5) security controls across AWS GovCloud or higher impact levels over AWS classified regions.
Customer-Hosted & PaaS Deployment Management. Deploy, operate, and automate Blitzy’s Kubernetes-based platform across both Blitzy-managed PaaS environments and customer-controlled, isolated VPCs.
Continuous Monitoring & Vulnerability Remediation. Implement automated compliance-as-code, continuous monitoring (ConMon), and vulnerability scanning pipelines to meet strict federal SLA timelines for POA&M and CVE remediation.
Air-Gapped & Boundary-Contained Observability. Design and operate logging, metrics, tracing, and alerting stacks that function completely within strict customer security boundaries without external data egress.
AI Workload Orchestration & Capacity Planning. Optimize Kubernetes clusters, GPU/compute scheduling, and distributed storage to support long-running, parallel AI agent execution and codebase knowledge graph ingestion.]
Zero-Trust Identity & Secrets Management. Enforce least-privilege access controls, FIPS 140-3 validated encryption in transit and at rest, mutual TLS (mTLS), and automated secrets rotation.
Support Blitzy’s Security and Compliance team’s efforts to produce evidence and documentation for third-party assessment organizations (3PAOs), System Security Plans (SSPs), and architecture diagrams.
Participate in cleared on-call rotations, lead root-cause analyses for production or customer-hosted escalations, and drive automated "fix-forward" reliability improvements.
Lead efforts to architect and deploy resilient infrastructure on AWS GovCloud / Azure Government. Support FedRAMP requirements for at least annual automated fail-over and recovery.
Support FedRAMP vulnerability management handling rules (NTC-0014), POAM, and Incident Response (if any) monthly reporting.
Define and maintain SLOs, SLIs, and error budgets for customer-hosted deployments, agreeing shared reliability targets with customers where Blitzy does not run the environment.
Run change control for customer-hosted releases. Deliver signed, versioned Helm and image releases with tested upgrade and rollback paths, schedule rollouts around customer change windows and change management reviews, and keep the configuration baselines and release notes current for audit evidence.

Site Reliability Engineer at Blitzy · LumiJobs

Site Reliability Engineer

Responsibilities

Qualification

Required

Benefits

Company

Blitzy

More roles at Blitzy