GRC Engineer: NIST & FedRAMP (Remote-First)

Workstreet; United States; Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Career Development

Training reimbursement

Competitive compensation

Growth opportunities

Remote-first culture

Job summary

Workstreet is seeking a GRC Engineer to join the GOV team and guide federal compliance efforts for defense contractors and government agencies. You will author SSPs, POA&Ms, map controls, and coordinate with 3PAOs in a fast-growing startup that values clarity, client-first service, and practical security outcomes.

You’ll manage multiple client projects, stay current on NIST revisions, and support readiness assessments and continuous monitoring across government clouds during US ET business hours.

Qualifications

• 2+ years of direct experience executing GRC deliverables across NIST SP 800-53, FedRAMP, or RMF lifecycles.
• Hands-on execution experience creating, evaluating, and maintaining SSPs, POA&Ms, and security narratives.
• Ability to manage multiple federal compliance project tasks simultaneously.

Responsibilities

• Execute NIST 800-53 control mappings and apply controls to architectures.
• Author SSPs, POA&Ms, and supporting A&A artifacts.
• Perform readiness and gap assessments for ATO or FedRAMP paths.
• Support continuous monitoring cycles and track vulnerability logs and changes.
• Coordinate with 3PAOs and assessors throughout A&A activities.
• Remediate control deficiencies across baselines and document security boundaries.
• Monitor federal regulatory updates to keep programs aligned.

Skills

GRC expertise

Federal compliance

Client communication

Multi-project management

Documentation

Tools

SSP authoring

3PAO coordination

Job description

Workstreet is seeking a GRC Engineer to join the GOV team and guide federal compliance efforts for defense contractors and government agencies. You will author SSPs, POA&Ms, map controls, and coordinate with 3PAOs in a fast-growing startup that values clarity, client-first service, and practical security outcomes.

You’ll manage multiple client projects, stay current on NIST revisions, and support readiness assessments and continuous monitoring across government clouds during US ET business hours.