Top Tech Jobs & Startup Jobs in Boston, MA

Manage and maintain RMF authorizations and audit evidence (SSPs, SARs, POA&Ms, STIGs), embed compliance into engineering and CI/CD, coordinate internal assessments and external audits (FedRAMP High, CMMC 2.0, SOC 2), run risk and vendor reviews, and automate continuous control testing across federal and commercial environments.

Design and operate Onebrief's GRC program across RMF, FedRAMP, CMMC and SOC 2. Build control environments, partner with engineering to implement technical controls (IAM, logging, encryption, segmentation), manage audits and evidence collection, and serve as the compliance lead for customer security reviews.

Work as an SRE embedded with product teams to improve reliability by fixing application code (primarily TypeScript), building observability (Prometheus, Loki, Grafana, Alloy), defining SLIs/SLOs, leading incident response and postmortems, automating toil, and supporting deployments across on‑prem DoD and AWS environments.

Lead contract execution for Onebrief's highest-priority government initiatives: align contractual obligations with program delivery, identify and mitigate risks, advise stakeholders, build contract management processes, and hire and mentor a team of Contract Managers to ensure successful post-award performance.

Design, build, and run secure production infrastructure across cloud-native and air-gapped deployments. Own end-to-end platform outcomes, harden the artifact pipeline for signed releases, embed with teams to advise on security and deployment best practices, and partner with GRC on STIGs, CVE remediation, and audit readiness for classified environments.

Build, operate, and secure cloud-native and edge infrastructure including Kubernetes, artifact pipelines, application streaming, and air-gapped appliances. Partner with product, GRC, and mission owners to design, deploy, and harden systems, remediate vulnerabilities, support audits (IL5/IL6/JWICS), and ensure trusted artifact delivery across environments.

Administer a portfolio of complex federal government contracts post-award, partner with cross-functional teams, prepare modifications and correspondence, identify and escalate contractual risks, maintain contract records and reporting, support customer communications, and improve contract management processes and playbooks.

Design, build, and operate secure cloud-native and edge infrastructure for classified and commercial environments. Own end-to-end platform outcomes, harden artifact pipelines for signed builds across cloud and air-gapped deployments, embed with product teams to advise on secure deployments, and support compliance/audit activities (STIGs, CVE remediation) to enable operation in IL5/IL6/JWICS environments.

Lead integrated communications strategy to advance policy, congressional, and reputational objectives. Manage media engagement, rapid response, external materials, and cross-functional messaging. Build and mentor the communications team and advise senior leadership.

As a Senior Software Engineer, you'll implement collaboration features, support team architecture, work across tech stacks, and improve developer experience.