Job Description:
• Design and implement the security capabilities that satisfy FedRAMP’s Key Security Indicators (KSIs) within your team’s specialty domains.
• Build the Security Decision Record (SDR) automation that deploys those capabilities repeatably across many client environments—infrastructure-as-code, pipelines, and configuration baselines, not one-off builds.
• Develop automated validation and continuous-monitoring evidence for each capability, so the certified state is provable every day.
• Deploy into client environments as the subject-matter expert for your domain: land the capability, integrate it with the client’s stack, troubleshoot, and harden.
• Bring lessons from every deployment back to your team, improving the standard implementation for the next client.
• Mentor junior team members by reviewing their work, sharing best practices, and guiding them through troubleshooting and operational standards.
• Contribute to documentation, runbooks, and machine-readable compliance artifacts.
• Support both new FedRAMP environment builds and the modernization of existing ones.
• Author and peer review detailed design and security documentation, inclusive of vendor best practices.
Requirements:
• BS or above in a related Information Technology field or equivalent combination of education and experience
• 5+ years in cloud, security, or platform engineering
• 5+ years supporting cloud architecture, design, implementation, operations, and automation in AWS, Azure, or GCP
• Experience with Infrastructure-as-Code and orchestration/automation tools such as Terraform and Ansible
• Automation-first mindset with strong Infrastructure-as-Code (Terraform or equivalent), CI/CD, and scripting (Python, Go, or similar); exposure to policy-as-code
• Hands-on depth with at least one major cloud platform (AWS, Azure, or GCP) and its native services
• Working knowledge of NIST 800-53, FedRAMP, or comparable security control frameworks
• The instinct to solve a problem once, properly, and package the solution so it works everywhere
• Excellent communication, organizational, and problem-solving skills
• Effective documentation skills, including technical diagrams and written descriptions
• Ability to work independently and as part of a team with a professional attitude and demeanor
• Critical thinking, and the ability to balance security requirements with mission needs
• Associate-level (or higher) certification in AWS, Azure, or GCP
Benefits:
• paid parental leave
• flexible time off
• certification and training reimbursement
• digital mental health and wellbeing support membership
• comprehensive insurance options