Compliance Engineer – Public Sector

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the technical strategy for FedRAMP Continuous Monitoring, transitioning from manual reporting to an automated, real-time telemetry system.

• Convert NIST 800-53 Rev. 5 and FedRAMP CR26 rulesets into scalable engineering and product solutions.

• Develop evidence generation frameworks to minimize manual workload for 3PAO assessments and automate compliance validation.

• Perform technical risk assessments and conduct root-cause analyses on compliance-related findings.

• Offer guidance on compensating controls and hardening strategies within cloud environments.

• Manage the technical compliance documentation lifecycle, including Security Decision Records (SDRs).

• Collaborate with legal, product, engineering, DevOps, architecture, security, and federal customer teams.

• Define technical compliance verification and validation criteria for new features and services.

• Mentor colleagues on best practices for FedRAMP/DoW compliance.

• Contribute to internal training initiatives.

• Understand business challenges and streamline compliance operations to enhance productivity and efficiency.

⛳️ Requirements

• Over 6 years of experience in security engineering, DevOps, and systems engineering.

• Demonstrated ability to develop processes and write code to address security and compliance challenges.

• More than 4 years of expertise in NIST SP 800-53, FedRAMP High baselines, and DoW SRG overlays.

• Proven capability to assess and mitigate risk while creating engineering solutions that support compliance.

• In-depth knowledge of FR 20x and CR26 rulesets for Rev5 authorizations and their implications for Cloud Service Providers.

• Experience in a cloud-native environment utilizing DevSecOps technologies, including CI/CD, Containers, and Kubernetes.

• Strong skills in scripting and Infrastructure as Code (IaC).

• Proficiency in Shell Scripting, Python, Terraform or OpenTofu.

• Experience with cloud platforms in government sectors.

• Applicants must meet the EAR part 772 and ITAR 120.15 definitions of a U.S. person.

• Candidates must reside in the contiguous United States.

• Must have the legal right to work in the country where the position is based without the need for visa sponsorship.

🏝️ Benefits

• Base salary.

• Bonus.

• Equity.

• Benefits.

• Information on Google benefits provided.