Senior Site Reliability Engineer

Marathon TS is seeking a Senior Site Reliability Engineer to build, automate, secure, and operate FedRAMP-authorized cloud environments across Azure, AWS, and GCP. The role serves as a technical subject matter expert responsible for reliable infrastructure, compliance automation, incident resolution, security improvement, and guidance to junior engineers.

Responsibilities:

• Build, configure, and maintain secure cloud environments across Azure, AWS, and GCP, with Azure experience strongly preferred
• Design and manage reusable cloud infrastructure using Terraform, including modules, remote state, and reproducible environment builds
• Build and maintain hardened golden machine images using HashiCorp Packer
• Administer RHEL 8/9 and Windows Server systems within cloud environments
• Implement and maintain systems aligned with FedRAMP, NIST 800-53, CMMC, RMF, CIS Benchmarks, and DISA STIGs
• Automate patching, vulnerability remediation, infrastructure provisioning, auditing, monitoring, and reporting
• Develop automation and tooling using Python, Bash, Ansible, and related technologies
• Implement compliance monitoring and automated remediation using tools such as Azure Policy, AWS Config, Security Hub, OpenSCAP, and Cloud Custodian
• Maintain monitoring, logging, and alerting platforms supporting production environments
• Integrate security controls, compliance checks, vulnerability scanning, and container scanning into CI/CD pipelines
• Automate audit evidence collection and security posture reporting
• Troubleshoot availability, performance, infrastructure, and security incidents
• Participate in a shared on-call rotation supporting production FedRAMP environments
• Collaborate with engineering and security teams and provide technical guidance to junior engineers

Requirements:

• 5+ years of hands-on experience engineering and operating enterprise or compliance-driven cloud infrastructure
• Strong hands-on experience with Terraform, including module development and remote state management
• Deep Linux administration experience, particularly RHEL 8/9
• Working experience administering Windows Server environments
• Strong scripting and automation experience using Python and Bash
• Experience with Ansible or another configuration management platform
• Hands-on experience with at least one major cloud platform: Azure, AWS, or GCP
• Working knowledge of FedRAMP, NIST 800-53, DISA STIGs, DoD SRG, CMMC, or comparable security frameworks
• Experience implementing security hardening, patching, and vulnerability remediation
• Active cloud certification required
• Must be a U.S. Person as defined by applicable federal requirements
• Azure experience strongly preferred
• Azure certifications such as AZ-104 or AZ-305 are strongly preferred; AWS and GCP certifications will also be considered