Note: The job is a remote job and is open to candidates in USA. Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. They are seeking a Principal Cloud Engineer to own the technical integrity of FedRAMP reference architectures and set engineering standards for delivery teams.
Responsibilities
- Own the technical integrity of Coalfire’s FedRAMP reference architectures and capabilities across AWS, Azure, and GCP, and across certification levels
- Set the engineering standards delivery teams build against—architecture patterns, security baselines, automation frameworks, and evidence-collection approaches
- Review and approve custom architecture decisions when client requirements fall outside the standard; promote recurring customizations into the reference architecture so the standard improves every quarter
- Serve as a technical escalation point for delivery teams on architecture and security design questions to improve client outcomes
- Keep reference architectures current with evolving FedRAMP requirements, including machine-readable compliance packaging (OSCAL or JSON) and continuous-monitoring mandates
- Mentor engagement architects and senior engineers; raise the technical bar across the delivery organization
- Partner with the sales organization on solution shape for the most strategic pursuits
- Represent Coalfire’s technical point of view in the FedRAMP community—working groups, public comment, and industry forums
Skills
- BS or above in a related Information Technology field or equivalent combination of education and experience
- 10+ years in cloud security engineering and architecture, including principal- or staff-level scope
- Hands-on FedRAMP authorization experience—building, operating, or assessing FedRAMP environments
- Demonstrated design-authority experience: owning standards, running architecture review, and documenting decisions in a form other engineers build from
- Deep expertise in infrastructure-as-code (Terraform or equivalent), CI/CD, policy-as-code, and compliance automation
- Architecture depth on at least two of the three major cloud platforms (AWS, Azure, GCP)
- Fluency in NIST 800-53 and the FedRAMP control framework, as well as CMMC and DoD compliance standards
- Excellent communication, organizational, and problem-solving skills
- Effective documentation skills, including technical diagrams and written descriptions
- Ability to work independently and as part of a team with a professional attitude and demeanor
- Critical thinking, and the ability to balance security requirements with mission needs
- Professional/Expert-level certification in at least one major cloud platform (AWS, Azure, or GCP)
- Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable evidence (OSCAL, JSON)
- Experience designing productized or repeatable delivery models for professional services
- Published writing, conference talks, or open-source work in cloud security or compliance automation
- CISSP, CISM, or CISA certifications
- Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG
Benefits
- Flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office
- Opportunities to join employee resource groups
- Participate in in-person and virtual events
- Paid parental leave
- Flexible time off
- Certification and training reimbursement
- Digital mental health and wellbeing support membership
- Comprehensive insurance options
Company Overview