FedRAMP-Ready AWS Security & Infrastructure Lead

Forerunner; New York (NY); Hybrid; USD 195.000 - 220.000; Vollzeit

Benefits dieser Stelle

Health/vision/dental coverage

401k plan

Expensed lunch weekly

Quarterly wellness reimbursement

Hybrid work model

Zusammenfassung

Forerunner is hiring a Senior Security & Infrastructure Engineer to own the security and compliance posture of our AWS infrastructure end-to-end, from authorization boundaries to automation, while advancing FedRAMP authorization. You will work at the intersection of security engineering, infrastructure, and compliance, partnering with our engineering team to make security decisions default.

You will drive FedRAMP execution, implement machine-readable evidence, and coordinate with 3PAOs.

Qualifikationen

• FedRAMP authorization experience (Agency or JAB, Moderate+) and lessons learned.
• Strong AWS and infrastructure-as-code fundamentals.
• Ability to write a control narrative and fix the Terraform it describes.
• Experience with SOC 2 / StateRAMP / TX-RAMP, continuous monitoring tooling, threat modeling.
• Bonus: Node/TypeScript environments, PostGIS, GovTech/public sector delivery.

Aufgaben

• Own the security and compliance posture of AWS infra (us-east-1, Moderate).
• Drive FedRAMP execution with compliance lead: machine-readable evidence in Vanta, control implementation, coordination with 3PAO.
• Harden/modernize production infra: IaC, segmentation, secrets management, logging/detection (Datadog), incident response.
• Integrate security into CI/CD and developer workflows, not as an afterthought.
• Collaborate with engineering (≈12 people) to land security decisions as defaults.

Kenntnisse

FedRAMP authorization

AWS experience

Infrastructure as code

Terraform

SOC 2 / StateRAMP / TX-RAMP

Continuous monitoring

Threat modeling

Node/TypeScript

PostGIS

GovTech/public sector delivery

Tools

Datadog

Vanta

Jobbeschreibung

Forerunner is hiring a Senior Security & Infrastructure Engineer to own the security and compliance posture of our AWS infrastructure end-to-end, from authorization boundaries to automation, while advancing FedRAMP authorization. You will work at the intersection of security engineering, infrastructure, and compliance, partnering with our engineering team to make security decisions default.

You will drive FedRAMP execution, implement machine-readable evidence, and coordinate with 3PAOs.