RemoteLeaf Logo
Log in Sign up

Engagement Architect - Cloud Architecture (FedRAMP)

2 months, 3 weeks ago
United States
Full-time
Lead
Infrastructure Engineer
DevOps and Infrastructure
AWS Azure Cybersecurity GCP HIPAA JSON
Apply Now
Coalfire

Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services
251-1K
Founded 2001
$9M raised
View All Jobs 13

Description

  • Own client engagements end-to-end from contract signature through environment build, control implementation, automated evidence pipelines, and handoff to managed operations.
  • Instantiate and adapt Coalfire’s reference architecture for the contracted certification level, cloud platform, and client boundary.
  • Lead implementation of security controls and the automation that continuously validates them.
  • Coordinate Coalfire engineering teams as they deploy identity, monitoring, change management, and related capabilities into the engagement.
  • Drive the build through defined quality gates and ensure a clean transition to operations with all in-scope controls implemented, validated, and stable.
  • Serve as the client’s primary technical counterpart by running technical working sessions, managing milestones and risks, and maintaining scope control.
  • Document architecture decisions and incorporate lessons learned into Coalfire’s standards.

Requirements

  • BS or above in a related Information Technology field, or an equivalent combination of education and experience.
  • 8+ years in cloud engineering or architecture, including 3+ years leading technical delivery for external clients.
  • Experience leading FedRAMP builds or authorizations, or equivalent depth in another regulated cloud regime such as DoD impact levels, StateRAMP, PCI, or HIPAA.
  • Hands-on experience with infrastructure-as-code, identity and access management, logging and monitoring, and cloud networking on at least one major cloud platform (AWS, Azure, or GCP).
  • Strong client-facing communication skills with the ability to explain architecture decisions to engineers, sponsors, or assessors.
  • Sound judgment about scope, risk, and escalation.
  • Excellent organizational, problem-solving, and documentation skills, including technical diagrams and written descriptions.
  • Ability to work independently and as part of a team with a professional attitude and demeanor.
  • Critical thinking and the ability to balance security requirements with mission needs.
  • Professional-level certification in AWS, Azure, or GCP.
  • Travel approximately 10–25% based on client needs.
  • U.S. citizenship is desired for support of U.S. federal compliance programs.
  • Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable compliance artifacts such as OSCAL or JSON.
  • Experience with productized or fixed-price delivery models.
  • Relevant certifications such as cloud platform professional/security certifications or CISSP.
  • Familiarity with configuration baseline standards such as CIS Benchmarks and DISA STIG.
  • Familiarity with frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, or PCI.

Benefits

  • Flexible work model with the option to work from home or an office.
  • Paid parental leave.
  • Flexible time off.
  • Certification and training reimbursement.
  • Digital mental health and wellbeing support membership.
  • Comprehensive insurance options.
  • Opportunities to join employee resource groups and participate in in-person and virtual events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

DoorDash

Staff Security Engineer, Security Enablement

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Staff Security Engineer to architect and deliver global, multi-domain security services spanning physical security, cloud infrastructure, identity, networking, and operational systems.

United States Full-time Lead Security Engineer
$194k-$285k
AWS DevSecOps GCP JIRA Network Security Python REST API SQL
5 hours, 25 minutes ago
G

Network Security Automation Engineer

GoDaddy 5001-10000 Technology, Information and Internet

GoDaddy is hiring a remote Network Security Automation Engineer in India to build and operate software, APIs, and automated workflows that manage network security policies at scale.

India Full-time Mid Level DevOps Engineer Security Engineer
AWS CI/CD Git Kubernetes Network Security Python REST API Serverless SIEM Terraform TLS
5 hours, 41 minutes ago
Dentons

Information Security Engineer

Dentons 5K-10K Specialized Consumer Services

Dentons Europe is hiring an Information Security Engineer to secure Microsoft cloud and hybrid environments, guide technology teams, and improve enterprise security, compliance, and reliability across Europe.

Spain Full-time Mid Level Security Engineer
Azure Bash Cybersecurity Network Security Penetration Testing PowerShell Python SOC
6 hours, 11 minutes ago
EVOTEK

Security Solutions Engineer (Pre-Sales) - Remote/Oakland, CA

EVOTEK 51-250 IT Services

EVOTEK is hiring a Security Solutions Engineer to lead cybersecurity pre-sales engagements, design solutions, and help clients reduce cyber risk while driving new business opportunities.

United States Full-time Senior Sales Engineer Security Engineer
$150k-$200k
Cybersecurity
6 hours, 11 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers