Enterprise Platform Compliance Engineer

CACI; Virginia (MN); Hybrid; USD 95,000 - 211,000; Full time

Job summary

A leading company is seeking an Enterprise Platform Compliance Engineer to support cybersecurity compliance for the USCG. The role involves developing compliance baselines, automating assessments, and collaborating with engineering teams. Candidates should have extensive experience in IT compliance and cybersecurity, with a strong focus on federal systems. This is a full-time, remote opportunity with a competitive salary and benefits.

Benefits

Flexible remote work environment

Professional development opportunities

Qualifications

• 5+ years of experience in IT compliance, cybersecurity, or enterprise systems engineering.
• Experience with compliance frameworks such as NIST 800-53, NIST 800-171, FedRAMP, and FISMA.

Responsibilities

• Develop and enforce compliance baselines for USCG enterprise platforms.
• Automate compliance assessments and monitor configuration drift.
• Collaborate with USCG teams to support ATO packages.

Skills

IT compliance

cybersecurity

documentation

communication

Education

Bachelor’s degree in Cybersecurity

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Assurance

Tools

PowerShell

Terraform

Azure CLI

AWS Config

Nessus

OpenSCAP

Microsoft Defender for Cloud

Azure Policy

Azure Sentinel

Splunk

Job description

Job Profile:

Information Assurance/Compliance T5
JR Type: Funded
Job Category: Information Technology
Minimum Clearance Required to Start: Secret
Percentage of Travel Required: None
Type of Travel: None
Program/Opportunity Name: Program | CDM
Referral Bonus Plan: $1,000* * *
Job Description:
The Opportunity:
The Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) Program seeks an Enterprise Platform Compliance Engineer to support the United States Coast Guard (USCG) in maintaining cybersecurity compliance across cloud and on-premise platforms. The ideal candidate will have experience in technical security baselining, automated compliance monitoring, and documentation aligned with federal mandates. This role is essential for aligning enterprise platform configurations with security frameworks such as NIST, FedRAMP, and FISMA to support USCG’s Authorization to Operate (ATO) processes.
Responsibilities:

1. Develop and enforce compliance baselines for USCG enterprise platforms (e.g., Windows, Linux, Azure, AWS).
2. Map system controls and platform settings to federal compliance frameworks (e.g., NIST 800-53, NIST 800-171, FedRAMP, CIS Benchmarks).
3. Automate compliance assessments and monitor configuration drift using tools such as Microsoft Defender for Cloud, Azure Policy, and AWS Config.
4. Collaborate with USCG ISSMs, ISSOs, and engineering teams to support ATO packages and ensure continuous compliance monitoring.
5. Analyze and remediate vulnerabilities, configuration weaknesses, and deviations from security baselines.
6. Support the creation and maintenance of security documentation including SSPs, POA&Ms, Configuration Management Plans, and audit evidence.
7. Implement scripts and automation (e.g., PowerShell, Terraform, Azure Automation) to enforce and verify compliance controls.
8. Develop dashboards and reports for compliance tracking using Microsoft Sentinel, Azure Monitor, or Power BI.
9. Participate in USCG RMF control assessments and internal audits, preparing systems for reauthorization or inspection.
10. Contribute to secure DevSecOps processes by integrating platform compliance into CI/CD pipelines and infrastructure code repositories.

Qualifications:
This is a full-time, remote opportunity. Candidates must reside within the United States.
• 5+ years of experience in IT compliance, cybersecurity, or enterprise systems engineering supporting federal systems.
• Experience with compliance frameworks such as NIST 800-53, NIST 800-171, FedRAMP, and FISMA.
• Hands-on experience with Windows or Linux system hardening using STIGs, CIS Benchmarks, or SCAP tools.
• Experience automating and validating compliance using tools such as Azure Policy, Microsoft Defender for Cloud, AWS Config, Nessus, or OpenSCAP.
• Strong documentation experience supporting SSPs, POA&Ms, risk assessments, and audits.
• Proficient in scripting and automation for compliance management (e.g., PowerShell, Terraform, or Azure CLI).
• Excellent communication and collaboration skills for working with USCG stakeholders, security analysts, and engineers.
Desired:
• Bachelor’s degree in Cybersecurity, Computer Science, Information Assurance, or related field.
• Certifications such as Security+, CISSP, AZ-500, SC-100, AWS Security Specialty, or GRC.
• Experience with Azure Security Center, Azure Sentinel, AWS Security Hub, and Splunk.
• Knowledge of Secure Cloud Computing Architecture (SCCA) and USCG-specific compliance requirements.
• Familiarity with USCG RMF lifecycle, internal audit support, and configuration management plans.
• Experience integrating compliance and policy controls into DevSecOps pipelines.
• Prior experience supporting DHS, USCG, or other federal cybersecurity programs.
What We Offer:
• Named one of the Washington Post’s Best Places to Work.
• Flexible remote work environment.
• Competitive salary and benefits, including professional development.
CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, or veteran status.
Pay Range: The estimated salary range is $95,500-$210,100, influenced by location, experience, and qualifications.