# Sr Staff Production Engineer- Public Sector

**Company:** [Databricks](https://hotfix.jobs/companies/databricks)
**Location:** Virginia
**Role:** DevOps / SRE
**Salary:** $195k – $269k/yr
**Experience:** 12+ years
**Skills:** AWS, Azure, GCP, IAM, Terraform, CloudFormation, Okta, Opal, Infrastructure As Code, CI/CD
**Posted:** 2026-04-22

> Senior Production Engineer owns secure cloud infrastructure, IAM, and automation across AWS, Azure, GCP for public sector and regulated environments. Requires 12+ years experience, cloud expertise, and TS/SCI clearance eligibility.

## Job Description

## The Impact You'll Have

### Security-Focused Cloud Operations
- Design, automate, and operate the IAM, account/subscription, and project lifecycle across AWS, Azure, and GCP, enforcing least-privilege and standardized access patterns at scale.
- Review, implement, and continuously improve cloud identity and access policies (IAM, Okta, Opal) to align with Databricks security standards and audit requirements.

### Production Engineering & Automation
- Build and maintain reliable, observable automation and tooling to apply cloud changes (roles, policies, accounts, networking) safely and repeatedly.
- Treat operational and security issues as software problems: eliminate toil, drive root-cause analysis, and codify fixes into infrastructure and tooling.

### Security Data Pipelines & Compliance
- Own and improve security and audit logging data pipelines from cloud providers into our internal systems, ensuring timely, accurate data for detection, investigations, and audits.
- Partner with Security, Compliance, and Audit teams to provide evidence, clarifications, and policy updates that keep our environments aligned with evolving standards.

### Regulated & Specialized Environments
- Operate and improve specialized, highly regulated environments (e.g., FedRAMP / GovCloud) including release management, patching cadences, and supporting secure access workflows (e.g., SAW).
- Ensure high availability and resiliency for critical security and access infrastructure across these environments.

### On-Call & Incident Response
- Participate in a 24x7 on-call rotation for high-severity incidents impacting cloud accounts, IAM, or security data pipelines.
- Act as a key partner to product engineering, security engineering, and field teams during incidents to restore service and harden systems for the future.

## What We Look For

**Required:** Candidates must be eligible for a Top Secret / Sensitive Compartmented Information (TS/SCI) security clearance.

**Nice to have:** Possession of a current polygraph (Counterintelligence or Full Scope) is highly desired and considered a significant plus.

**Education:** BS, MS, or PhD in Computer Science, Engineering, or a related technical field, or equivalent practical experience.

**Experience:** 12+ years of experience, including leading the strategy for cloud IAM, account architecture, or security-critical infrastructure across multiple environments or business units.

### Cloud & Infrastructure Expertise
- Deep hands-on experience with at least one major cloud provider (AWS, Azure, or GCP) in areas such as IAM, networking, accounts/subscriptions/projects, and audit logging.
- Strong background in Infrastructure-as-Code and automation (e.g., Terraform, CloudFormation, or similar) and CI/CD for infrastructure changes.

### Security & Compliance Mindset
- Proven experience working in or with security-sensitive or regulated environments (e.g., SOC2, FedRAMP, ISO 27001, financial services, public sector) and translating requirements into concrete technical controls.
- Familiarity with access review processes, policy baselines, and audit evidence for cloud environments.

### Operational Excellence
- Demonstrated success running high-availability, security-critical services, including on-call responsibilities and incident management.
- Strong debugging and problem-solving skills across distributed systems, with the ability to navigate ambiguous issues spanning multiple teams and platforms.

### Bonus
- Experience with Okta, Opal, or similar identity/access tooling.
- Background operating secure admin workstations (SAW) or comparable hardened access patterns.
- Experience migrating cloud accounts or subscriptions during M&A or large-scale reorganizations.

**Pay Range:** $195,400—$268,600 USD

## Similar roles

- [Staff Network Engineer, Operations](https://hotfix.jobs/jobs/19d77267-e1da-45b5-9ed9-fce44a90d734) - Crusoe - San Francisco, CA - $195k – $235k/yr
- [Staff Software Engineer (Remote)](https://hotfix.jobs/jobs/ef29c10f-91ff-45a6-a1ac-7cfa27a1728e) - Imply - Remote - $195k – $230k/yr
- [Staff Platform Engineer (Pacific Time Zone)](https://hotfix.jobs/jobs/17dff3fb-b234-4e52-859c-0f6a74271006) - Komodo Health - Remote - $196k – $275k/yr
- [Staff Site Reliability Engineer](https://hotfix.jobs/jobs/e9e97d33-7b7c-40f8-adce-c5353951d3ff) - Fivetran - Oakland, CA - $196k – $245k/yr
- [Staff Engineer](https://hotfix.jobs/jobs/c04f6e72-1a89-4d07-af71-b851172954d7) - Illumio - Sunnyvale, CA - $194k – $233k/yr

**Apply:** https://hotfix.jobs/jobs/253cecf4-4af7-41fa-8107-670bdac039f6
**Canonical:** https://hotfix.jobs/jobs/253cecf4-4af7-41fa-8107-670bdac039f6