Federal GRC Engineer - FedRAMP & NIST 800-53

Workstreet; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Remote-first culture

Job summary

Workstreet is expanding its GRC Engineering team and is seeking a motivated GRC Engineer with solid experience in NIST 800-53, FedRAMP, and RMF lifecycles. You will author artifacts, perform gap assessments, and support government cloud deployments in a fast-paced startup environment.

You will work with federal clients, guide ATO processes, and coordinate with 3PAOs, ensuring continuous compliance and secure cloud configurations across CSPs.

Qualifications

• 2+ years of direct GRC experience (NIST SP 800-53, FedRAMP or RMF lifecycles).
• Experience creating, evaluating, and maintaining SSPs, POA&Ms, and technical security narratives.
• Ability to manage multiple federal compliance projects concurrently under guidance.
• Familiarity with government cloud environments (AWS GovCloud, Azure Government).
• Strong written and verbal English communication for client-facing work.

Responsibilities

• Execute NIST 800-53 control mappings and align baselines to federal standards.
• Author SSPs, POA&Ms, and A&A artifacts.
• Perform readiness and gap assessments for ATO or FedRAMP paths.
• Support ConMon cycles with vulnerability logs and POA&M updates.
• Coordinate with 3PAOs and assessors for external assessments.
• Assist remediation across Low/Moderate/High baselines.
• Map security boundaries and shared responsibility across clouds.
• Track updates to NIST SP 800-53 and FedRAMP requirements.

Skills

GRC experience

Multitask management

Client communication

Federal compliance

Job description

Workstreet is expanding its GRC Engineering team and is seeking a motivated GRC Engineer with solid experience in NIST 800-53, FedRAMP, and RMF lifecycles. You will author artifacts, perform gap assessments, and support government cloud deployments in a fast-paced startup environment.

You will work with federal clients, guide ATO processes, and coordinate with 3PAOs, ensuring continuous compliance and secure cloud configurations across CSPs.