Software Engineer II, FedRAMP - Smartsheet

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day.

Automation is the key to creating highly reliable and secure large-scale software systems. Are you ready to launch your career by engineering solutions rather than simply fixing problems?

We are looking for a Software Engineer II to join our Security Engineering team in the US. This is a unique opportunity to grow your career at the intersection of platform engineering, security, and developer experience. You will be mentored by senior leaders to help build and evolve a platform with security as a first priority, and support engineering teams with onboarding, automating, and simplifying the experience in order to improve resilience/reliability, reduce operational burden for teams, and accelerate productivity and velocity for Smartsheet . You will work closely with stakeholders and the Government FedRAMP program manager to ensure adherence to technical and process requirements for our Gov platform.

In this role, you will learn to treat security and reliability as software engineering challenges. You will grow into a key contributor who ensures our production environment is scalable, defensible, and highly reliable.

What You Will Do

• Support FedRAMP compliance: You will work to ensure that platform and service architecture meets FedRAMP program requirements, including developing architecture diagrams and documents and communicating updated guidelines and directives to internal stakeholders.
• Learn and Build Secure Infrastructure: Under the guidance of senior engineers, you will assist in designing and maintaining secure infrastructure on EKS in our multi-cloud environment (AWS) using Infrastructure as Code (Terraform).
• Automate Security & Workflows: You will write code (Python, Go, or Bash) to automate manual tasks, threat detection, and vulnerability management processes.
• Secure the Pipeline: You will help integrate security tools (SAST, DAST, SCA) into our CI/CD pipelines, ensuring developers receive fast, actionable feedback on their code.
• Support Container Operations: You will gain hands-on experience managing and securing our container orchestration platform (Kubernetes/EKS) and self-hosted GitLab Runners.
• Collaborate and Grow: You will participate in code reviews, technical discussions, and blameless post-mortems to learn operational excellence and security best practices.

What You Have (Qualifications)

• US Person Status: Must be a U.S. Citizen, U.S. National to meet