FedRAMP GRC Engineer - Automate Compliance Pipelines

Workstreet; United States; À distance; USD 110 000 - 170 000; Plein temps

Avantages offerts par ce poste

Career development

Role-related training

Competitive compensation

Growth opportunities

Remote-first culture

Résumé du poste

Workstreet is seeking a GRC Engineer (FedRAMP 20x) to join our government delivery practice. You will perform hands-on technical work, build automated evidence pipelines, and author machine-readable artifacts to support FedRAMP 20x certification lifecycles.

You will partner with client engineers and compliance leads, assist with 3PAO assessments, and help maintain continuous monitoring across multi-cloud environments. Remote-first, US-focused teamwork is expected.

Qualifications

• 2+ years delivering GRC artifacts across NIST SP 800-53, FedRAMP, or federal lifecycles.
• Foundational understanding of FedRAMP 20x (Class A/B/C), CR26 rules, and KSIs.
• Hands-on with OSCAL, JSON or YAML schemas for artifacts.
• Experience with AWS GovCloud or Azure Government or other sovereign clouds.
• Scripting/policy-as-code with Python, Rego/OPA, Terraform.
• Strong organizational skills coordinating multiple compliance tasks.

Responsabilités

• Execute FedRAMP 20x control validation across CR26 and KSIs.
• Author machine-readable certification artifacts (OSCAL/JSON/YAML).
• Build automated evidence pipelines for ongoing KSIs.
• Conduct readiness/gap assessments across FedRAMP 20x baselines.
• Support CCM and 3PAO assessments with evidence submission.
• Remediate security gaps with client and internal teams.
• Monitor regulatory updates (CR26, SCNs, Rev5→20x).

Connaissances

English communication

Client collaboration

Documentation

GRC deliverables

FedRAMP knowledge

NIST SP 800-53

3PAO coordination

Outils

OSCAL

JSON

YAML

Terraform

Description du poste

Workstreet is seeking a GRC Engineer (FedRAMP 20x) to join our government delivery practice. You will perform hands-on technical work, build automated evidence pipelines, and author machine-readable artifacts to support FedRAMP 20x certification lifecycles.

You will partner with client engineers and compliance leads, assist with 3PAO assessments, and help maintain continuous monitoring across multi-cloud environments. Remote-first, US-focused teamwork is expected.