Senior Product Engineer (Security Focus)

Govly

10d

About The Position

We are hiring a Senior Product Engineer to join our team of 8 engineers. You will work across the full stack — building features, fixing bugs, and shipping product alongside the rest of the team. Your immediate priority will be owning our cloud infrastructure, security posture, and compliance work, including getting us through FedRAMP and IL5 authorization. This is not a siloed DevOps role — it is a product engineering role where infrastructure and security are the current focus. This role will start as an individual contributor with end-to-end ownership. Team growth will be driven by results and business needs, not assumed on day one.

Requirements

Strong product engineering background — you have shipped features, not just managed infrastructure
Comfortable working across the stack, whether it is building APIs in Rails, writing SQL, or driving out user-facing features in React
Experience building and securing AWS environments with production workloads
Experience with or willingness to own FedRAMP authorization
Experience with Kubernetes, Docker, and container orchestration in production
US citizenship and ability to obtain or maintain a security clearance
Comfort building systems before everything is staffed or tooled
Getting things done quickly and utilizing Claude Code and MCPs to augment your workflow
Writing code across the stack — Ruby/Rails, TypeScript/React, Postgres, Redis, and Elasticsearch
Building and securing cloud environments on AWS
Database administration, performance tuning, and query optimization
Infrastructure-as-code and CI/CD pipeline design
Context-switching between product work and infrastructure

Nice To Haves

Understanding of DoD IL5 requirements
Infrastructure-as-code experience (Terraform, CloudFormation, Pulumi, or similar)
Experience with PostgreSQL performance optimization and database management
Experience with compliance frameworks (FedRAMP, CMMC, SOC 2)

Responsibilities

End-to-end feature development across the Govly platform
All DevOps for our commercial and government cloud environments, including cost optimization, performance tuning, potential service migrations, and moving toward infrastructure-as-code
Our CMMC enclave for commercial customers handling CUI
CVE monitoring and patching across all Govly repositories
Database performance optimization and reporting
Reliable, obfuscated data pipelines from production to staging to development environments
Compliant data flow from our commercial environment to our government environment
Compliance framework management, including documentation and process (e.g., SOC 2 via Vanta)
Ad hoc compliance questions and customer security questionnaires