5 hours ago
Base Salary
$174k - $238k/yr
Responsibilities
- Lead the technical roadmap for FedRAMP Continuous Monitoring and transition manual reporting to automated, real-time telemetry.
- Translate NIST 800-53 Rev. 5 and FedRAMP CR26 rulesets into scalable compliance-as-code engineering and product solutions.
- Architect evidence-generation frameworks and automate compliance validation for control implementation verification and 3PAO assessments.
- Conduct technical risk assessments, analyze compliance findings, and guide compensating controls and cloud hardening measures.
- Own the technical compliance documentation lifecycle, including Security Decision Records.
- Collaborate with legal, product, engineering, DevOps, architecture, security, and federal customer teams on compliance verification requirements.
- Mentor colleagues on FedRAMP and DoW compliance practices and contribute to internal training.
Requirements
- 6+ years of experience in security engineering, DevOps, and systems engineering, including developing processes and writing code for security and compliance problems.
- 4+ years of expertise with NIST SP 800-53, FedRAMP High baselines, and DoW SRG overlays.
- Expertise with FR 20x and CR26 rulesets for Rev. 5 authorizations and their effects on cloud service providers.
- Experience in cloud-native environments using CI/CD, containers, and Kubernetes.
- Strong scripting and infrastructure-as-code proficiency with Shell Scripting, Python, Terraform or OpenTofu, and preferred AI harnesses such as Claude Code or OpenAI Codex.
- Experience with cloud platforms in government environments.
- Experience with AWS GovCloud is preferred.
- Experience with Azure Government, Google Cloud for Government (Assured Workloads), or equivalent government cloud services is preferred.
- Preferred experience includes DevSecOps technologies, microservices, GitOps, observability, logging, SIEM platforms, Packer, configuration-as-code tools, policy-as-code tools, and automated compliance validation.
- Must meet the EAR Part 772 and ITAR 120.15 definition of a U.S. person and reside in the contiguous United States.
- Must have the legal right to work in the country of employment without visa sponsorship.
Benefits
- Full-time position with bonus, equity, and benefits in addition to base salary.
- Applicants must reside in the contiguous United States and the role does not offer visa sponsorship.