Engagement Architect - Cloud Architecture (FedRAMP)

Coalfire Systems; Chicago (IL); Hybrid; USD 89,000 - 149,000; Full time

Benefits offered by this job

Flexible work model

Competitive benefits

Job summary

Coalfire Systems is seeking an Engagement Architect - Cloud Architecture (FedRAMP) to own client engagements from contract signature through architecture build, security control implementation, and transition to managed operations. You will lead a team, adapt reference architectures, and ensure automated evidence pipelines meet FedRAMP expectations.

You will collaborate with engineering teams on identity, monitoring, change management, and security controls while communicating clearly with

Qualifications

• BS or higher in an IT field or equivalent experience.
• 8+ years in cloud engineering or architecture, including leading delivery for external clients.
• FedRAMP builds or authorizations experience or depth in a regulated cloud regime.
• Hands-on experience with AWS, Azure, or GCP and IaC.
• Strong communication and ability to balance security with mission needs.

Responsibilities

• Own client engagements end-to-end from signing to managed transition.
• Instantiate reference architecture for contracted certification level and cloud platform.
• Lead security control implementation and automation for continuous validation.
• Coordinate engineering teams across identity, monitoring, and change management.
• Drive build quality gates and ensure a measurable handoff to operations.
• Serve as the client’s primary technical contact and manage milestones and risks.

Skills

Client-facing communication

Problem-solving

Leadership

Independent worker

Team collaboration

Education

BS or above in IT or related field

Tools

Infrastructure as Code

IAM

Logging & Monitoring

Cloud Networking

Job description

Coalfire Systems

Coalfire is an EEO employer. We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees.

Engagement Architect - Cloud Architecture (FedRAMP)

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.

But that’s not who we are – that’s just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

Why Join Us

Coalfire builds and operates FedRAMP-compliant cloud environments for software companies entering the federal market. We’re looking for an Engagement Architect to serve as the technical owner of a client engagement—taking a signed contract and carrying it through architecture build, security control implementation, and a verified transition into managed operations. You’ll own active engagements: deep enough to be accountable for every technical outcome, focused enough to do it well. If you’re driven by a desire to innovate, excel at operational excellence, and thrive in a collaborative environment, come be part of a team committed to making the world a safer place.

What You'll Do

• Own client engagements end-to-end: from contract signature through environment build, control implementation, automated evidence pipelines, and handoff to managed operations.
• Instantiate Coalfire’s reference architecture for the contracted certification level and cloud platform, adapting it to the client’s application and boundary.
• Lead implementation of security controls and the automation that continuously validates them—the evidence a modern FedRAMP certification runs on.
• Coordinate Coalfire’s engineering teams as they deploy their capabilities (identity, monitoring, change management, and more) into your engagement.
• Drive the build through defined quality gates, with a clean, measurable transition to operations—every in-scope control implemented, validated, and stable.
• Serve as the client’s primary technical counterpart: run technical working sessions, manage milestones and risks, and keep scope honest.
• Document architecture decisions and feed lessons from each build back into Coalfire’s standards.

WORK ENVIRONMENT/TRAVEL REQUIRED

Travel: Approximately 10–25%, driven by client needs

U.S. citizenship is desired, as this position supports U.S. federal compliance programs.

What You'll Bring

• BS or above in a related Information Technology field or equivalent combination of education and experience
• 8+ years in cloud engineering or architecture, including 3+ years leading technical delivery for external clients
• Experience leading FedRAMP builds or authorizations—or equivalent depth in another regulated cloud regime (DoD impact levels, StateRAMP, PCI, HIPAA)
• Hands-on skill across infrastructure-as-code, identity and access management, logging and monitoring, and cloud networking on at least one major cloud platform (AWS, Azure, or GCP)
• Strong client-facing communication—able to explain an architecture decision to an engineer, a project sponsor, or an assessor
• Sound judgment about scope, risk, and when to escape
• Excellent organizational and problem-solving skills
• Effective documentation skills, including technical diagrams and written descriptions
• Ability to work independently and as part of a team with a professional attitude and demeanor
• Critical thinking, and the ability to balance security requirements with mission needs
• REQUIRED CERTIFICATIONS:
• Professional-level certification in AWS, Azure, or GCP

Bonus Points

• Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable compliance artifacts (OSCAL or JSON)
• Experience with productized or fixed-price delivery models
• Relevant certifications such as cloud platform professional/security certifications or CISSP
• Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG
• Familiarity with frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, or PCI

The salary range listed is a reasonable estimate of the compensation range for this role based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs.

Why You'll Want to Join Us

At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.

Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [e-mail].

$89,000 - $149,000 a year

Equal employment opportunity, including veterans and individuals with disabilities.

PI286779291