• Design, implement, and maintain cloud infrastructure supporting ICAM platforms and services, including computer, networking, storage, and security components, leveraging infrastructure-as-code (IaC) principles and tools. • Build, maintain, and optimize CI/CD pipelines for the automated deployment, testing, and release of ICAM platform configurations, integrations, and application code across development, test, staging, and production environments. • Implement and manage infrastructure-as-code (IaC) solutions using tools such as Terraform, AWS CloudFormation, or Ansible to provision and manage cloud resources supporting ICAM platforms in a consistent, repeatable, and auditable manner. • Support the deployment, configuration, and operational management of ICAM platform components in cloud environments, including Okta tenant configurations, SailPoint cloud deployments, and related identity infrastructure. • Collaborate with ICAM architects and platform engineers to design cloud architectures that meet federal security requirements, Zero Trust principles, and ICAM platform-specific technical requirements. • Implement and maintain DevSecOps practices across the ICAM platform delivery lifecycle, integrating security scanning, vulnerability assessment, compliance checks, and policy enforcement into CI/CD pipelines.

• Design, implement, and maintain GitLab CI/CD pipelines that automate build, test, security validation, and deployment workflows • Develop and manage Infrastructure as Code (IaC) solutions using Ansible, AWS CloudFormation, Terraform, or related technologies to provision and configure cloud resources consistently • Engineer, deploy, and manage secure, scalable cloud infrastructure across AWS and Azure environments, with emphasis on availability, resiliency, and repeatable delivery • Support continuous Authorization to Operate (cATO) and automated ATO processes by automating compliance checks, evidence collection, assessment workflows, and use of pre-configured templates • Integrate and operationalize security and compliance telemetry from tools such as Splunk, Tenable, and CrowdStrike to support continuous monitoring, automated compliance validation, and remediation tracking • Support ingestion, normalization, and use of compliance data from FedRAMP, StateRAMP, SOC 2, and related sources within authorization and continuous-monitoring workflows • Maintain cloud configuration-management processes, approved baselines, and version-controlled environment configuration standards • Provide engineering support for continuous cybersecurity operations, including technical enablement of 24x7 security monitoring, event-log management, alerting, dashboards, and reporting • Support incident-response activities by developing or maintaining automation, integrations, and infrastructure capabilities used for containment, eradication, recovery, and post-incident analysis • Implement and improve analytics and automation capabilities, including AI-enabled approaches where approved, to enhance threat detection, triage, and operational efficiency • Produce and maintain event-log management reports and supporting artifacts consistent with applicable federal requirements, including OMB M-21-31 • Collaborate with development, security, cloud architecture, and operations teams to integrate DevSecOps practices throughout the software delivery lifecycle • Monitor, troubleshoot, and optimize cloud infrastructure and pipeline performance; resolve complex issues in a timely and effective manner • Develop and maintain technical documentation, including runbooks, architecture diagrams, standard operating procedures, configuration records, and operational playbooks • Participate in Agile ceremonies and evaluate tools, technologies, and processes that improve DevOps, cloud operations, security automation, and system onboarding

• Own and evolve the infrastructure that powers our AI platform • Work closely with teammates throughout engineering and security to design scalable, resilient, and secure systems • Enhance production monitoring and observability in containerized environments • Improve our infrastructure-as-code deployments (Pulumi) to prepare for scaling to the next customer growth inflection point • Develop and refine internal tooling to support efficiency and reliability • Strengthen the reliability, performance, and scalability of our core SOC analyst product • Participate actively in a 24x7 on-call rotation, maintaining high availability and rapid response • Contribute to future expansion efforts to support multi-cloud infrastructure (GCP, Azure) • Write new product features when interested and excited to do so

• Implement and maintain SAST, DAST and SCA tools in the CI/CD pipeline (Bitbucket/GitHub/GitLab) • Implement, maintain, operate and evolve the Secrets Manager and Vault • Perform continuous secret scanning in repositories and drive remediation of findings with development teams • Conduct security-focused code reviews on critical features — authentication, authorization, external integrations, handling of sensitive data • Harden infrastructure: Terraform state, IAM policies, AWS configurations, Security Groups • Support remediation of technical findings collected from security analysis tools, external pentests and internal scans • Build and lead the Security Champions program — identify focal points within dev squads and structure ongoing training • Conduct threat modeling for new features and critical integrations with product and engineering teams • Define and document security requirements in the SDLC — from design to deployment • Assess the security of internal and external APIs, partner integrations and authentication flows