Cloud Engineer – FEDRAMP

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and execute security functionalities that fulfill FedRAMP’s Key Security Indicators (KSIs) within your team's specialized areas.

• Develop the Security Decision Record (SDR) automation to deploy these functionalities consistently across various client environments—utilizing infrastructure-as-code, pipelines, and configuration baselines, rather than ad-hoc builds.

• Create automated validation and continuous monitoring evidence for each functionality, ensuring the certified status is verifiable on a daily basis.

• Implement solutions in client environments as the subject-matter expert for your area: establish the functionality, integrate it with the client’s ecosystem, troubleshoot, and enhance security.

• Bring insights from each deployment back to your team, refining the standard implementation for future clients.

• Guide junior team members by reviewing their work, sharing best practices, and assisting them through troubleshooting and operational standards.

• Contribute to the creation of documentation, runbooks, and machine-readable compliance artifacts.

• Assist in both the establishment of new FedRAMP environments and the modernization of existing ones.

• Write and review detailed design and security documentation, including vendor best practices.

⛳️ Requirements

• Bachelor’s degree or higher in a relevant Information Technology field or an equivalent combination of education and experience.

• Over 5 years of experience in cloud, security, or platform engineering.

• More than 5 years of experience supporting cloud architecture, design, implementation, operations, and automation in AWS, Azure, or GCP.

• Proficient in Infrastructure-as-Code and orchestration/automation tools such as Terraform and Ansible.

• Automation-first mentality with strong skills in Infrastructure-as-Code (Terraform or equivalent), CI/CD, and scripting (Python, Go, or similar); familiarity with policy-as-code.

• Extensive hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native services.

• Familiarity with NIST 800-53, FedRAMP, or similar security control frameworks.

• The ability to solve problems correctly and efficiently, packaging solutions for universal applicability.

• Strong communication, organizational, and problem-solving abilities.

• Proficient documentation skills, encompassing technical diagrams and written explanations.

• Capacity to work autonomously and collaboratively within a team, maintaining a professional attitude and demeanor.

• Critical thinking skills with the ability to balance security requirements against mission necessities.

• Associate-level (or higher) certification in AWS, Azure, or GCP.

🏝️ Benefits

• Paid parental leave.

• Flexible time off.

• Certification and training reimbursement.

• Digital mental health and wellbeing support membership.

• Comprehensive insurance options.