Software Engineer II, FedRamp (Remote Eligible) at Smartsheet · Remote

Summary: Smartsheet has been enabling teams for over 20 years with innovative work management solutions. They are seeking a Software Engineer II to join their Security Engineering team, focusing on building secure infrastructure and supporting FedRAMP compliance. The role involves automating security workflows and collaborating with stakeholders to enhance platform reliability and security. Responsibilities: - Support FedRAMP compliance: You will work to ensure that platform and service architecture meets FedRAMP program requirements, including developing architecture diagrams and documents and communicating updated guidelines and directives to internal stakeholders - Learn and Build Secure Infrastructure: Under the guidance of senior engineers, you will assist in designing and maintaining secure infrastructure on EKS in our multi-cloud environment (AWS) using Infrastructure as Code (Terraform) - Automate Security & Workflows: You will write code (Python, Go, or Bash) to automate manual tasks, threat detection, and vulnerability management processes - Secure the Pipeline: You will help integrate security tools (SAST, DAST, SCA) into our CI/CD pipelines, ensuring developers receive fast, actionable feedback on their code - Support Container Operations: You will gain hands-on experience managing and securing our container orchestration platform (Kubernetes/EKS) and self-hosted GitLab Runners - Collaborate and Grow: You will participate in code reviews, technical discussions, and blameless post-mortems to learn operational excellence and security best practices Required Qualifications: - US Person Status: Must be a U.S. Citizen, U.S. National to meet federal compliance requirements - Education: A BS or MS in Computer Science, Engineering, or a related field (or equivalent capability) - Foundational Coding Skills: Proficiency in at least one modern programming or scripting language, such as Python, Go, Java, or Bash - Cloud Curiosity: A basic understanding of cloud concepts (AWS preferred) and a strong desire to learn Infrastructure as Code (Terraform) - Security Mindset: Familiarity with basic security concepts (e.g., OWASP Top 10) or a strong interest in the cybersecurity landscape - Problem Solving: A critical thinker who enjoys troubleshooting complex technical problems and wants to understand how large-scale systems work - Communication: Excellent verbal and written communication skills and a collaborative spirit Preferred Qualifications: - Previous internship experience in DevOps, SRE, Platform Engineering, or Software Engineering - Experience with Linux/Unix command line - Personal projects or coursework involving Docker, Kubernetes, or CI/CD pipelines (GitLab/GitHub) - Basic understanding of networking concepts (HTTP, DNS, TCP/IP) Required Skills: Programming languages - Python, Programming languages - Go, Programming languages - Java, Programming languages - Bash, Cloud computing - AWS, Infrastructure as Code - Terraform, Security concepts - OWASP Top 10, Container orchestration - Kubernetes, Container orchestration - EKS, CI/CD pipelines, Security tools - SAST, Security tools - DAST, Security tools - SCA Benefits: Medical/vision and dental coverage options for full-time employees, 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay), Monthly stipend to support your work and productivity, Flexible Time Away Program, plus Sick Time Off, US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans, US employees receive 12 paid holidays per year, Up to 24 weeks of Parental Leave, Personal paid Volunteer Day to support our community, Opportunities for professional growth and development including access to Udemy online courses, Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account, Teleworking options from any registered location in the U.S. (role specific)