Software Engineer II, FedRamp (Remote Eligible)
Role details
Job location
Tech stack
Job description
We are looking for a Software Engineer II to join our Security Engineering team in the US. This is a unique opportunity to grow your career at the intersection of platform engineering, security, and developer experience. You will be mentored by senior leaders to help build and evolve a platform with security as a first priority, and support engineering teams with onboarding, automating, and simplifying the experience in order to improve resilience/reliability, reduce operational burden for teams, and accelerate productivity and velocity for Smartsheet. You will work closely with stakeholders and the Government FedRAMP program manager to ensure adherence to technical and process requirements for our Gov platform.
In this role, you will learn to treat security and reliability as software engineering challenges. You will grow into a key contributor who ensures our production environment is scalable, defensible, and highly reliable., * Support FedRAMP compliance: You will work to ensure that platform and service architecture meets FedRAMP program requirements, including developing architecture diagrams and documents and communicating updated guidelines and directives to internal stakeholders.
- Learn and Build Secure Infrastructure: Under the guidance of senior engineers, you will assist in designing and maintaining secure infrastructure on EKS in our multi-cloud environment (AWS) using Infrastructure as Code (Terraform).
- Automate Security & Workflows: You will write code (Python, Go, or Bash) to automate manual tasks, threat detection, and vulnerability management processes.
- Secure the Pipeline: You will help integrate security tools (SAST, DAST, SCA) into our CI/CD pipelines, ensuring developers receive fast, actionable feedback on their code.
- Support Container Operations: You will gain hands-on experience managing and securing our container orchestration platform (Kubernetes/EKS) and self-hosted GitLab Runners.
- Collaborate and Grow: You will participate in code reviews, technical discussions, and blameless post-mortems to learn operational excellence and security best practices.
Requirements
- US Person Status: Must be a U.S. Citizen, U.S. National to meet federal compliance requirements.
- Education: A BS or MS in Computer Science, Engineering, or a related field (or equivalent capability).
- Foundational Coding Skills: Proficiency in at least one modern programming or scripting language, such as Python, Go, Java, or Bash.
- Cloud Curiosity: A basic understanding of cloud concepts (AWS preferred) and a strong desire to learn Infrastructure as Code (Terraform).
- Security Mindset: Familiarity with basic security concepts (e.g., OWASP Top 10) or a strong interest in the cybersecurity landscape.
- Problem Solving: A critical thinker who enjoys troubleshooting complex technical problems and wants to understand how large-scale systems work.
- Communication: Excellent verbal and written communication skills and a collaborative spirit., * Previous internship experience in DevOps, SRE, Platform Engineering, or Software Engineering.
- Experience with Linux/Unix command line.
- Personal projects or coursework involving Docker, Kubernetes, or CI/CD pipelines (GitLab/GitHub).
- Basic understanding of networking concepts (HTTP, DNS, TCP/IP).