News for hackers. Stuff that matters.
Re:Cloud.gov by bmogilefsky on Saturday June 04, 2016 @05:16PM (#11838077)
I'm the product lead on cloud.gov... Thanks for noticing us! There are other Cloud Foundry deployments, but what makes cloud.gov special is the focus on ensuring federal agencies are actually able to use it. Federal compliance for a cloud service provider is a tough bar to clear, and without it most agencies are simply unable to take advantage of capabilities the rest of the world now takes for granted. That in turn impedes improvements in the many services the government has to offer. We've just reached the "FedRAMP Ready" status, which is a signifier of confidence that cloud.gov will make it through the exhaustive auditing process to come. Best of all, everything were doing is open source, including all the compliance work, so others will be able to follow in our footsteps. AMA!
Re:Cloud.gov by chias on Sunday June 05, 2016 @01:35AM (#11839775)
This is totally a minor thing, but I feel like the icons halfway down the page are off-by-one: http://i.imgur.com/bXTZqOZ.png

That is, the arrowbox thingie for scalability, the lock for security, etc?

Re:Cloud.gov by bmogilefsky on Sunday June 05, 2016 @10:31AM (#11841145)
Good eyes, will see if we can fix that.
Re:Cloud.gov by Shengbo on Sunday June 05, 2016 @11:33AM (#11841470)
Another very minor thing is that when I click anywhere inside the section below the header, a light-grey border shows up.

http://imgur.com/qaqvozK

Re:Cloud.gov by wslack on Sunday June 05, 2016 @01:25PM (#11842007)
Re:Cloud.gov by jeremiak on Tuesday June 07, 2016 @11:52AM (#11855308)
Thanks for reporting! I opened this issue to make sure we fix it: https://github.com/18F/cg-landing/issues/70
Re:Cloud.gov by empath75 on Saturday June 04, 2016 @05:37PM (#11838205)
What sorts of jobs are available there and what's the salary like? I currently do devops at a large Internet content company near Dulles and I've got federal government experience from many years ago.
Re:Cloud.gov by bmogilefsky on Saturday June 04, 2016 @05:53PM (#11838278)
We're recruiting actively across many disciplines. 18F employs a huge range of amazing people with diverse histories from both inside and outside of government. Everyone is an impact junkie. Salary is competitive with industry through a special hiring authority although capped at government levels without bonus, stock, etc. There are intangibles that come from actually being able to improve the way government approaches technology and adopts user-centered design, agile culture, and DevOps that are totally unique. https://18f.gsa.gov/join
Re:Cloud.gov by gooserock on Saturday June 04, 2016 @09:12PM (#11839138)
For what it's worth, I applied to work with 18F late last year. I'm a web developer with a wide array of skills - front-end, back-end, and even UI/UX design, product design, and some marketing and management - with about 8 years of experience, mostly doing independent consulting with a couple years at a SF startup in there. I'm also very civic minded, doing a bunch of pro-bono work and (since) getting involved in community activism.

I had two phone interviews in which both interviewers asked almost the exact same questions (which struck me as odd). Then I had a third phone interview in which the interviewer - who had a law background, as I recall - seemed very disappointed that I had not worked on Google-sized teams before. Maybe he was having a bad day, but his tone made it sound like I was wasting his time. That was the last I heard from them.

Sorry, this probably isn't the right place to comment on this, but I just wanted to share my experience with you. I was somewhat disappointed in the process, even though I LOVE the mission of 18F. I was prepared to up and move to DC, and honestly take whatever salary you offered - I was in it for the mission, not the money.

Re:Cloud.gov by rmason on Saturday June 04, 2016 @09:22PM (#11839173)
If your in it for the mission, not the money consider applying as a Code For America fellow:

https://www.codeforamerica.org/do-something/work-with-us

There are a lot of cities that could use your help. I am in no way connected with them but am a huge fan of their mission.

Re:Cloud.gov by gooserock on Saturday June 04, 2016 @09:30PM (#11839206)
I've actually started working with some Code for America folks here in my community - independently of CfA - on some city open data projects. They're awesome. :-)
Re:Cloud.gov by dexterdog on Sunday June 05, 2016 @08:49AM (#11840663)
I would do it, but why do they have to base you in SF? You should be able to stay local to where you are actually helping.
Re:Cloud.gov by gooserock on Sunday June 05, 2016 @10:16AM (#11841057)
I think there might be state-based chapters? My friends here are actually part of "Code for Maine."
Re:Cloud.gov by NotSammyHagar on Sunday June 05, 2016 @04:31PM (#11842968)
What are the security and nda requirements? I recently got an invitation to a show and tell meeting (a recruiting event) but I didn't end up going. I'm afraid of having to sign onerous agreements, similar to a "never tell anyone that this was bad". I unfortunately fell victim to that at a startup, and I want to maintain my freedom to praise or criticize the government and politicians as appropriate.
Re:Cloud.gov by hiram112 on Sunday June 05, 2016 @04:29AM (#11840129)
I also applied. It took about a month for someone to send me a two sentence 'thanks but no thanks' response. No interview offered.

I'm no rockstar, but I do have nearly a decade of experience, half of which is gov. contracting in the beltway. And my resume has no problems attracting recruiters from Amazon, MS, etc.

The whole process (admittedly only a few emails back and forth) felt very amateurish - as if their recruitment was run by some non-technical recent grads - similar to a lot of NGOs in the area.

Re:Cloud.gov by jrockway on Saturday June 04, 2016 @09:17PM (#11839160)
What is a Google-sized team?
Re:Cloud.gov by gooserock on Saturday June 04, 2016 @09:27PM (#11839195)
My experience has all been with teams and companies < 15 people, and he seemed unhappy about that.

The startup I worked on had 12 people at its height (before it was bought by a large tech company), and I was the first employee hire so I was in a position of some leadership.

He kept asking me strange questions that presupposed I knew how to negotiate with large entities like government agencies... as a developer.

That interview - plus the other two "groundhog day" interviews - were the strangest interview process I've ever experienced.

Re:Cloud.gov by jcrites on Saturday June 04, 2016 @09:51PM (#11839246)
> He kept asking me strange questions that presupposed I knew how to negotiate with large entities like government agencies... as a developer.

Perhaps that's part of the skills that are needed to succeed at 18F. It sounds like these folks are in a sort of consulting position where they help other government agencies with technical projects and policy efforts. Take a look at the 18F Innovation Specialist GS-14 and -15 roles: https://pages.18f.gov/joining-18f/pay-grades/ - based on your background, they might have expected you to fall somewhere around, I'm guessing, GS-14 (1). Some of the qualifications required are:

> Knowledge of and expertise in driving and implementing technology solutions that overcome significant challenges resulting from complex or bureaucratic environments, or technically difficult problems

> Skill in oral communication to present sensitive recommendations to higher authority, to obtain compliance with policies from activities nationwide, to articulate positions/policy of vast technical complexity, and to represent the agency on task forces

> Comprehensive knowledge of and expertise in all stages of product or business development, and ability to lead complex technology and policy initiatives from inception to implementation

Bureaucratic environment is right there in the job description :-) More seriously, this sounds like a reasonably senior technical role in which one would likely interface with other agencies in the way you're describing. GS-15 is even more demanding. While it's disappointing that the interview expressed condescension at your lack of expertise in this area (and expressed anything other than professionalism), I can understand given these qualifications why they'd probe into those skills. It appears they're looking for technical leaders, and not exclusively heads-down individual contributors -- this makes sense to me given their mission. These positions seem to be about influencing the government through policy and technology initiatives, and influencing other government agencies (which is harder than influencing one's local environment), not just delivering technical projects.

I am not trying to excuse the interview experience that you had, just to be clear. I'm just making an observation about the kind of challenges they appear to have, and the kind of qualifications they might be looking for in candidates to tackle them. Innovation Specialist GS-14 and GS-15 sounds like pretty interesting roles. I am personally glad that they expect such leadership from technical specialists; this kind of broader influence is key to career growth as a technical person past a certain point. Organizations that don't expect this and foster this in individual contributors are organizations where you need to move into management in order to keep moving up.

However, it sounds like they could have done a lot better job communicating with you respectfully and professionally, as well as conveying what they're looking for.

(1) I know nothing about 18F beyond what I've read on these sites, nor about government pay grades. I'm just taking a guess based on your industry experience, and by comparing the 18F job role levels to the qualifications expected of candidates with similar background in private industry.

Re:Cloud.gov by gooserock on Saturday June 04, 2016 @10:07PM (#11839289)
Thanks for your thoughts, I think you have a decent point there.

My experience does include running front-end at the startup I worked at, and even being part of the three-person group that decided on the direction of the product (with the two founders). My communication skills are battle-tested from years of contracting (and a liberal arts university background), but I do lack experience dealing with huge bureaucracies and I lack experience with business development. So maybe that was it.

That said, if your theory is right that they were slotting me in as a GS-14, they could have communicated with me about that difficulty. I would have been totally fine with whatever role they wanted to give me - which I made clear in the "groundhog day" interviews - because I just wanted to help. :-D

Re:Cloud.gov by rhizome on Saturday June 04, 2016 @10:39PM (#11839363)
Look at job ads. Many, many companies of all sizes ask for experience working with massively distributed architectures, "over 1,000 servers" and things like that.
Re:Cloud.gov by dijit on Sunday June 05, 2016 @05:55AM (#11840301)
FWIW I built and worked on a server farm of upwards of 2,000 physical servers with myself and one other. (with minor labour support from another team of 3 people when needed).

it's possible to work in a small team and be effective even at large scale.

Re:Cloud.gov by rhizome on Sunday June 05, 2016 @03:19PM (#11842586)
Absolutely, but I feel that in SV/SF it's used as a dogwhistle calling to refugees from FB, Goog, Yahoo, linkedin, etc.
Re:Cloud.gov by rcaught on Saturday June 04, 2016 @09:25PM (#11839186)
A team the size of Google.
Re:Cloud.gov by CydeWeys on Saturday June 04, 2016 @10:37PM (#11839357)
If that happens to you in the future, be honest and say that the other interviewer already asked you the same questions. Not doing so probably worked against you, as someone probably realized at some point that the same questions had been asked, and then they looked at each other in confusion wondering "Why didn't this guy say something?"
Re:Cloud.gov by gooserock on Sunday June 05, 2016 @02:58AM (#11839952)
The funny thing was, in interview #2 I did mention that that they were asking me all the same questions, once it became clear that that was happening. The interviewer was like, "Oh? Really? Well this is our interview process," and then kept going. And these were 30-45 minute phone interviews, too. It was really strange.
Re:Cloud.gov by CydeWeys on Sunday June 05, 2016 @04:18PM (#11842904)
That doesn't even make any sense. Why would you intentionally ask people the same questions two times? Something is screwed up over there. I'm surprised you stuck with it after that; I would've turned down going any farther with it. If their interviewing is that broken then you know the work must be too.
Re:Cloud.gov by bmogilefsky on Saturday June 04, 2016 @08:47PM (#11839061)
I said "through a special hiring authority" above but that's inaccurate, sorry for the mix-up... We use the normal GS scale.
Re:Cloud.gov by Redoubts on Saturday June 04, 2016 @09:13PM (#11839147)
> Open positions

> We're pausing applications while we evolve how 18F plans for open roles. We estimate that we’ll post new open positions at the end of June.

???

Re:Cloud.gov by a12k on Saturday June 04, 2016 @06:19PM (#11838413)
Hey I'm very interested in pursuing FOIA modernization with you guys. Is sending in a resume through the link the best way to proceed?
Re:Cloud.gov by aidanfeldman on Saturday June 04, 2016 @06:39PM (#11838509)
The way we operate is that agencies come to us to do projects (or we initiate shared services like cloud.gov), so we don't exactly get to pick anything we want. That being said, there is a lot of freedom within the projects we have to work on things that interest you.
Re:Cloud.gov by bmogilefsky on Saturday June 04, 2016 @07:57PM (#11838866)
(And yes, sending a resume is how you get started.)
Re:Cloud.gov by verst on Saturday June 04, 2016 @05:46PM (#11838248)
See: https://pages.18f.gov/joining-18f/

I'll let @bmogilefsky describe the jobs. @18F as a whole hires engineers, designers, product managers, content writers, journalists, folks with non-traditional cross-functional backgrounds, etc.

Salary depends on job grade. See [1] for an explanation of the grades within 18F. Then see the GS pay scale [2] to figure out the pay for your grade in your region.

[1]: https://pages.18f.gov/joining-18f/pay-grades/

[2]: https://www.opm.gov/policy-data-oversight/pay-leave/salaries...

Re:Cloud.gov by brianwawok on Saturday June 04, 2016 @06:10PM (#11838364)
Nothing says "we employ the best" like "fixed salary based on tenure and job function"
Re:Cloud.gov by verst on Saturday June 04, 2016 @06:52PM (#11838585)
18F positions are limited to 2 years, renewable by another 2 years.

Many people (self included) leave the private sector for this duration to support the mission of 18F. After the term is over many people will return to the private sector.

I'm OK with a pay cut to work on meaningful projects that benefit the American public. I'm not worried about returning to the private sector if/when I choose to do so.

Re:Cloud.gov by aidanfeldman on Saturday June 04, 2016 @06:41PM (#11838526)
That's a bit out of our control. We are able to hire quickly because we use a "specialist" hiring authority, but that comes with downsides like what you describe. I'm a developer and am making more than I did at any previous job, if that helps.
Re:Cloud.gov by wslack on Saturday June 04, 2016 @06:16PM (#11838399)
18F and other groups in government offer a great potential for impact, but we don't have the same flexibility in compensation policy because of universal federal rules.

Speaking personally, I think there's a lot of room for policy folks to dig into how gov't can better hire and retain skilled talent, but that's not 18F's function.

Re:Cloud.gov by brianwawok on Saturday June 04, 2016 @09:13PM (#11839141)
For sure, I don't blame 18f, it is just super annoying to see things like this.
Re:Cloud.gov by geofft on Saturday June 04, 2016 @07:43PM (#11838813)
Do they claim anything like "we employ the best"?

(It's probably better that they don't: http://www.joelonsoftware.com/items/2005/01/27.html)

Re:Cloud.gov by wslack on Saturday June 04, 2016 @07:57PM (#11838868)
No. I love all of my colleagues, but we don't claim to have superpowers.
Re:Cloud.gov by mooreds on Saturday June 04, 2016 @11:44PM (#11839528)
They are working within constraints. The federal government has all kinds of rules about salary and benefits.

When I applied, they had a table of salaries, adjusted for location, so at least they were transparent about it.

Re:Cloud.gov by gravypod on Saturday June 04, 2016 @08:21PM (#11838963)
Right now I am in college, does 18F or USGS have flexible hours or work for me over the summer?

I'd love to get involved, I'm mainly focused in software engineering. It seems like a great cause to partake in.

Re:Cloud.gov by adelevie on Saturday June 04, 2016 @09:28PM (#11839198)
I can't give a comprehensive answer as to how we hire, but I can offer my personal experience: I was able to finish my last year of part-time law school when I started at 18F. I was working full time, and everyone was very respectful about having a life outside of work.

In the shorter term, do check out https://micropurchase.18f.gov. It's where we post very short term contract opportunities ($3,500 or less, and tasks typically take up to a week). I also happen to be a dev on this project, so feel free to reach out here or at [email protected] if you have any questions.

Re:Cloud.gov by allengeorge on Sunday June 05, 2016 @12:04AM (#11839574)
I
Re:Cloud.gov by VonGuard on Saturday June 04, 2016 @06:17PM (#11838404)
You forgot to mention your slack: chat.cloud.gov, where people can come ask questions, right?
Re:Cloud.gov by aidanfeldman on Saturday June 04, 2016 @06:36PM (#11838498)
https://chat.18f.gov/?channel=devops-public, actually. EDIT: Gaaah, sorry, down right now for reasons. Will post here again when it's back up. Sorry!
Re:Cloud.gov by deftnerd on Saturday June 04, 2016 @08:11PM (#11838920)
I think that Slack being down is related to this:

Watchdog: 18F's Slack security exposed GSA data https://fcw.com/articles/2016/05/13/slack-security-18f.aspx

It was enough of a problem that the reaction was to probably take it down and take a hard look at everything before being it back up. Maybe a hosted rocket.chat will be the replacement to allow them more granular control over security.

Re:Cloud.gov by apahwa on Saturday June 04, 2016 @07:02PM (#11838625)
that link is broken
Re:Cloud.gov by verst on Saturday June 04, 2016 @07:11PM (#11838666)
https://github.com/18F/chat

Seems like the Slack invite app is not deployed to cloud.gov right now.

Re:Cloud.gov by konklone on Saturday June 04, 2016 @07:20PM (#11838701)
It's down for some internal IT reasons, but should be back up at some point soon (but not this weekend).
Re:Cloud.gov by xvilka on Sunday June 05, 2016 @06:54AM (#11840393)
Since whole platform is open source, I wonder why Slack? Why not Mattermost[1]?

[1] http://www.mattermost.org/

Re:Cloud.gov by kordless on Sunday June 05, 2016 @11:19AM (#11841407)
How do you see innovations in software able to reconcile bureaucratic processes while not remaining susceptible to scalability and trust issues?

I could easily see how the government's business process could be at conflict with the commercial sector's business process. Colluding the two in even a single Open Source project would seem to be illogical.

Re:Cloud.gov by mcritz on Saturday June 04, 2016 @05:28PM (#11838148)
Any plans to standardize agencies tech stacks? Is that even a good idea?
Re:Cloud.gov by bmogilefsky on Saturday June 04, 2016 @05:40PM (#11838219)
We can't control the decisions they make, and wouldn't want to... Each agency has their own CIO, and needs to be able to make decisions about stacks based their needs. Compliance requirements for running a service in public are so huge that agencies have conservatively stuck to ancient options, or farmed it all out to vendors. Our goal is to make the operations, deployment, and compliance aspects of service delivery trivial so they can put more of their resources (and those of the vendors they pay) into the improvement of the services they provide rather than sinking a huge portion of their budgets into redundantly addressing compliance and deployment concerns. And of course, use modern tech.
Re:Cloud.gov by BinaryIdiot on Saturday June 04, 2016 @07:36PM (#11838777)
Good luck with that. I was only a government contractor and the amount of blue badges that argue how the other agency is doing it wrong / stupid and they would never use their stack is insane.
Re:Cloud.gov by bmogilefsky on Saturday June 04, 2016 @08:14PM (#11838929)
You're right, everyone is on the hook for their own agency, and with such strict regulations they are very conservative about using each other's stuff, which is effectively delegating decisions and responsibility to others that may get them in trouble.

This is a major reason for cloud.gov going after the FedRAMP JAB P-ATO recognition. "JAB" is the Joint Authorization Board comprised of the CIOs of the Department of Defense, Department of Homeland Security, and the General Services Administration. Having a triple-sign-off from three CIOs under a consistently applied set of standards is the highest social proof you can get in government that will convince other agency CIOs that it is OK to use your stuff at their agency. Normally it's vendors that go through this program... We're among the few to do it for a government-developed-and-operated service, and the first to do it for something as generally useful as a PaaS.

The other aspect is making sure everything we do to deploy and document the platform's compliance is open source and subject to scrutiny, so they can check for themselves... and ideally contribute in areas they think it could be better, of course!

Re:Cloud.gov by BinaryIdiot on Sunday June 05, 2016 @12:17AM (#11839595)
You're fighting the good fight and seems you have a good path. Curious how far you guys make it (it almost seems like everyone is against using "the other guy's" stuff but the vast majority of the time it would save millions). Good luck!
Re:Cloud.gov by wslack on Saturday June 04, 2016 @07:58PM (#11838871)
Yeah, I've certainly seen some of that. Hopefully, though, we can share and spread ideas, if not exact policies.
Re:Cloud.gov by booop on Saturday June 04, 2016 @06:11PM (#11838372)
Wouldn't deploying cloudfoundry to AWS GovCloud accomplish the same thing? (Sorry, if the question seems too ignorant)
Re:Cloud.gov by aidanfeldman on Saturday June 04, 2016 @06:43PM (#11838535)
We're in the process of moving to GovCloud, but that's a relatively small part of the overall compliance...fun...that goes into getting a service FedRAMP-approved.
Re:Cloud.gov by fudged71 on Sunday June 05, 2016 @12:32AM (#11839634)
The "Contact us" section is actually a "Subscribe to our newsletter", I would look into changing the copy there and/or providing actual contact details.
Re:Cloud.gov by jksmith on Saturday June 04, 2016 @08:57PM (#11839086)
Yep, I just got Azure Gov FedRamped on my project and it was some serious gnashing and pulling of teeth. Writing all those CMS and IRS procedure docs was a great, but arduous experience. There's a larger story here though involving application outside the US, which is what I'd like to pursue after my current project. It definitely will not include Azure unless that becomes a more cost effective platform. Would love to chat with you guys about some ideas.
Re:Cloud.gov by akshatpradhan on Saturday June 04, 2016 @09:52PM (#11839249)
>I just got Azure Gov FedRamped on my project and it was some serious gnashing and pulling of teeth. Writing all those CMS and IRS procedure docs was a great, but arduous experience.

If you're pulling teeth in regards to FEDRAMP, you can join ##GRC on irc.freenode.org with fellow teeth grinders. Its a chat channel with 20+ Security Auditors and System Administrators dedicated to discussing enforcement, regulations, and systems administration for FEDRAMP and other compliance frameworks.

There's also the brand new subreddit called /r/FEDRAMP that started a few days ago.

https://www.reddit.com/r/FEDRAMP.

Check the sidebar for other compliance frameworks too like /r/SOC2, /r/HIPAA, /r/ISO27001, and /r/PCICompliance.

https://www.reddit.com/r/HIPAA

https://www.reddit.com/r/PCICompliance

https://www.reddit.com/r/ISO27001

https://www.reddit.com/r/SOC2

Re:Cloud.gov by afarrell on Sunday June 05, 2016 @09:11AM (#11840750)
> are simply unable to take advantage of capabilities the rest of the world takes for granted

A major argument in favor of PACER is its high-availability. Hopefully this makes it easier to build a better system with the same high-availability but a much better UX.

Re:Cloud.gov by homero on Sunday June 05, 2016 @05:45AM (#11840277)
Please let the public use it
Re:Cloud.gov by kordless on Sunday June 05, 2016 @11:10AM (#11841364)
For the love all that is holy, no.