Principal Cloud Engineer

3 weeks, 2 days ago
Full-time
Lead
DevOps and Infrastructure
Coalfire

Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services
251-1K
Founded 2001
$9M raised

Description

  • Own the technical integrity of Coalfire’s FedRAMP reference architectures and capabilities across AWS, Azure, and GCP.
  • Set engineering standards for architecture patterns, security baselines, automation frameworks, and evidence-collection approaches.
  • Review and approve custom architecture decisions outside the standard and fold recurring customizations back into the reference architecture.
  • Serve as a technical escalation point for delivery teams on architecture and security design questions.
  • Keep reference architectures current with evolving FedRAMP requirements, including machine-readable compliance packaging and continuous monitoring.
  • Mentor engagement architects and senior engineers to raise the technical bar across the delivery organization.
  • Partner with the sales organization on solution shaping for strategic pursuits.
  • Represent Coalfire’s technical perspective in FedRAMP working groups, public comment, and industry forums.

Requirements

  • BS or above in Information Technology or an equivalent combination of education and experience.
  • 10+ years of cloud security engineering and architecture experience at a principal- or staff-level scope.
  • Hands-on FedRAMP authorization experience building, operating, or assessing FedRAMP environments.
  • Demonstrated design-authority experience owning standards, running architecture reviews, and documenting decisions.
  • Deep expertise in infrastructure as code (Terraform or equivalent), CI/CD, policy as code, and compliance automation.
  • Architecture depth on at least two major cloud platforms: AWS, Azure, or GCP.
  • Fluency in NIST 800-53, the FedRAMP control framework, CMMC, and DoD compliance standards.
  • Professional- or expert-level certification in at least one major cloud platform (AWS, Azure, or GCP).
  • Excellent communication, organizational, problem-solving, documentation, and critical-thinking skills.
  • U.S. citizenship required due to support for federal compliance programs.
  • Ability to travel approximately 10–15%.
  • Preferred: familiarity with FedRAMP 20x, KSIs, and machine-readable evidence formats such as OSCAL or JSON.
  • Preferred: experience designing productized or repeatable delivery models for professional services.
  • Preferred: published writing, conference talks, or open-source work in cloud security or compliance automation.
  • Preferred: CISSP, CISM, or CISA certification.
  • Preferred: familiarity with CIS Benchmarks and DISA STIG configuration baseline standards.

Benefits

  • Flexible work model with the ability to choose when and where you work most effectively.
  • Paid parental leave.
  • Flexible time off.
  • Certification and training reimbursement.
  • Digital mental health and wellbeing support membership.
  • Comprehensive insurance options.
  • Employee resource groups and in-person/virtual events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Identity Management Engineer / Architect (R-00197)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking an Identity Management Engineer / Architect to design and operate a secure enterprise identity platform across on-premises, cloud, SaaS, and hybrid environments in support of Zero Trust and regulated government use cases.

Active Directory Cybersecurity DevSecOps OAuth OpenID Connect PowerShell Python SAML Terraform
5 hours, 38 minutes ago

Director of Data Science and Bioinformatics

Natera 1K-5K Pharmaceuticals

Natera is hiring a Director of Data Science and Bioinformatics to lead the function supporting its Women’s Health and Organ Health product portfolios and to build the infrastructure and processes behind genomic clinical products.

AWS Docker Machine Learning MLflow MLOps
2 days, 5 hours ago

Cloud Architect - Networking

3Cloud 251-1K Internet Software & Services

3Cloud is hiring a Cloud Architect – Networking to lead Azure infrastructure delivery and architectural engagements with clients, ensuring scalable, secure, and well-coordinated cloud solutions.

Azure Terraform WAF
2 days, 5 hours ago

CyberSecurity Consultant | Contractor

Avertium 251-1K IT Services

Avertium is hiring a Cybersecurity Consultant for its Acceleration & Optimization team to lead Microsoft cloud security and architecture work for clients.

Azure CloudFormation Cybersecurity DevSecOps Elasticsearch ELK Stack GitHub HIPAA Jenkins Kibana Logstash REST API SQL
2 days, 5 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers