Cloud Engineer - FedRAMP

Under FedRAMP, compliance is no longer a document—it’s a set of Key Security Indicators (KSIs): measurable security outcomes validated through automation, continuously. Coalfire organizes its delivery engineering into capability-focused teams, each owning a set of KSI domains such as identity and access management, monitoring and logging, change management, or incident recovery. We’re looking for a Cloud Engineer to go deep on a team’s domains—building the standard implementation once, making it deployable anywhere, and landing it in client environment after client environment, getting better every time. If you’re driven by a desire to innovate, excel at operational excellence, and thrive in a collaborative environment, come be part of a team committed to making the world a safer place.

· Design and implement the security capabilities that satisfy FedRAMP’s Key Security Indicators (KSIs) within your team’s specialty domains.

· Build the Security Decision Record (SDR) automation that deploys those capabilities repeatably across many client environments—infrastructure-as-code, pipelines, and configuration baselines, not one-off builds.

· Develop automated validation and continuous-monitoring evidence for each capability, so the certified state is provable every day.

· Deploy into client environments as the subject-matter expert for your domain: land the capability, integrate it with the client’s stack, troubleshoot, and harden.

· Bring lessons from every deployment back to your team, improving the standard implementation for the next client.

· Mentor junior team members by reviewing their work, sharing best practices, and guiding them through troubleshooting and operational standards.

· Contribute to documentation, runbooks, and machine-readable compliance artifacts.

· Support both new FedRAMP environment builds and the modernization of existing ones.

· Author and peer review detailed design and security documentation, inclusive of vendor best practices.

WORK ENVIRONMENT/TRAVEL REQUIRED:

Travel: Approximately 10%, driven by client needs

U.S. citizenship is required, as this position supports federal compliance programs.