Compliance Engineer - Public Sector

Responsibilities

• Lead the technical roadmap for FedRAMP Continuous Monitoring and transition manual reporting to automated, real-time telemetry.
• Translate NIST 800-53 Rev. 5 and FedRAMP CR26 rulesets into scalable compliance-as-code engineering and product solutions.
• Architect evidence-generation frameworks and automate compliance validation for control implementation verification and 3PAO assessments.
• Conduct technical risk assessments, analyze compliance findings, and guide compensating controls and cloud hardening measures.
• Own the technical compliance documentation lifecycle, including Security Decision Records.
• Collaborate with legal, product, engineering, DevOps, architecture, security, and federal customer teams on compliance verification requirements.
• Mentor colleagues on FedRAMP and DoW compliance practices and contribute to internal training.

Requirements

• 6+ years of experience in security engineering, DevOps, and systems engineering, including developing processes and writing code for security and compliance problems.
• 4+ years of expertise with NIST SP 800-53, FedRAMP High baselines, and DoW SRG overlays.
• Expertise with FR 20x and CR26 rulesets for Rev. 5 authorizations and their effects on cloud service providers.
• Experience in cloud-native environments using CI/CD, containers, and Kubernetes.
• Strong scripting and infrastructure-as-code proficiency with Shell Scripting, Python, Terraform or OpenTofu, and preferred AI harnesses such as Claude Code or OpenAI Codex.
• Experience with cloud platforms in government environments.
• Experience with AWS GovCloud is preferred.
• Experience with Azure Government, Google Cloud for Government (Assured Workloads), or equivalent government cloud services is preferred.
• Preferred experience includes DevSecOps technologies, microservices, GitOps, observability, logging, SIEM platforms, Packer, configuration-as-code tools, policy-as-code tools, and automated compliance validation.
• Must meet the EAR Part 772 and ITAR 120.15 definition of a U.S. person and reside in the contiguous United States.
• Must have the legal right to work in the country of employment without visa sponsorship.

Benefits

• Full-time position with bonus, equity, and benefits in addition to base salary.
• Applicants must reside in the contiguous United States and the role does not offer visa sponsorship.