Principal Cloud Engineer

Coalfire; Washington (District of Columbia); Hybrid; USD 109,000 - 182,000; Full time

Benefits offered by this job

Paid parental leave

Flexible time off

Certification and training reimburse

Digital mental health and wellbeing

Comprehensive insurance options

Job summary

Coalfire is seeking a Principal Cloud Engineer to lead FedRAMP reference architectures across AWS, Azure, and GCP in the Washington, DC area. This senior individual-contributor role emphasizes design authority, architecture standards, and scalable delivery.

You will mentor engineers and collaborate with delivery and sales teams to craft strategic security solutions. The role requires 10+ years in cloud security engineering, hands-on FedRAMP experience, and cloud platform certifications, with a

Qualifications

• BS or above in a related Information Technology field or equivalent combination of education and experience.
• 10+ years in cloud security engineering and architecture, including principal- or staff-level scope.
• Hands-on FedRAMP authorization experience building, operating, or assessing FedRAMP environments.
• Demonstrated design-authority experience owning standards and documenting decisions.
• Fluency with Infrastructure-as-Code (Terraform or equivalent), CI/CD, policy-as-code, and compliance automation.
• Experience with AWS, Azure, and/or GCP; knowledge of NIST 800-53 and FedRAMP control framework.

Responsibilities

• Own the technical integrity of FedRAMP reference architectures across AWS, Azure, and GCP.
• Set engineering standards, architecture patterns, security baselines, and evidence-collection approaches.
• Review and approve custom architecture decisions and promote improvements to reference architecture.
• Serve as a technical escalation point for architecture and security design questions.
• Keep reference architectures current with evolving FedRAMP requirements and OSCAL/JSON packaging.
• Mentor engagement architects and senior engineers; raise the technical bar across delivery.
• Partner with sales on solution shape for strategic pursuits; represent Coalfire in FedRAMP forums.

Skills

Cloud security engineering

Architecture leadership

Terraform

CI/CD

Compliance automation

Education

Bachelor's degree in IT/CS or equivalent

Tools

Terraform

CI/CD tooling

Policy-as-code

Job description

Principal Cloud Engineer

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.

But thats not who we are thats just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

Why Join Us

FedRAMPs 2026 modernization replaces narrative compliance documentation with measurable security outcomes, validated through automation and evidenced continuously. Coalfire delivers FedRAMP environments against standardized reference architecture, and this role owns those architectures and the capabilities that deliver them. This is the top of our engineering individual-contributor track: a design-authority role with no direct reports, whose influence comes from technical judgment and expertise. The standards you set are what dozens of engineers build against, at every client, every day. Youll take on the most strategic and technical implementations our clients require and support the Cloud Services organization on continuous delivery improvements through client engagements. If youre driven by a desire to innovate, excel at operational excellence, and thrive in a collaborative environment, come be part of a team committed to making the world a safer place.

What You'll Do

Own the technical integrity of Coalfires FedRAMP reference architectures and capabilities across AWS, Azure, and GCP, and across certification levels.

Set the engineering standards delivery teams build againstarchitecture patterns, security baselines, automation frameworks, and evidence-collection approaches.

Review and approve custom architecture decisions when client requirements fall outside the standard; promote recurring customizations into the reference architecture so the standard improves every quarter.

Serve as a technical escalation point for delivery teams on architecture and security design questions to improve client outcomes.

Keep reference architectures current with evolving FedRAMP requirements, including machine-readable compliance packaging (OSCAL or JSON) and continuous-monitoring mandates.

Mentor engagement architects and senior engineers; raise the technical bar across the delivery organization.

Partner with the sales organization on solution shape for the most strategic pursuits.

Represent Coalfires technical point of view in the FedRAMP communityworking groups, public comment, and industry forums.

WORK ENVIRONMENT/TRAVEL REQUIRED:

Travel: Approximately 1015%

U.S. citizenship is required, as this position supports federal compliance programs.

What You'll Bring

BS or above in a related Information Technology field or equivalent combination of education and experience

10+ years in cloud security engineering and architecture, including principal- or staff-level scope

Hands-on FedRAMP authorization experiencebuilding, operating, or assessing FedRAMP environments

Demonstrated design-authority experience: owning standards, running architecture review, and documenting decisions in a form other engineers build from

Deep expertise in infrastructure-as-code (Terraform or equivalent), CI/CD, policy-as-code, and compliance automation

Architecture depth on at least two of the three major cloud platforms (AWS, Azure, GCP)

Fluency in NIST 800-53 and the FedRAMP control framework, as well as CMMC and DoD compliance standards

Excellent communication, organizational, and problem-solving skills

Effective documentation skills, including technical diagrams and written descriptions

Ability to work independently and as part of a team with a professional attitude and demeanor

Critical thinking, and the ability to balance security requirements with mission needs

REQUIRED CERTIFICATIONS:

Professional/Expert-level certification in at least one major cloud platform (AWS, Azure, or GCP)

Bonus Points

Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable evidence (OSCAL, JSON)

Experience designing productized or repeatable delivery models for professional services

Published writing, conference talks, or open-source work in cloud security or compliance automation

CISSP, CISM, or CISA certifications

Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG

$109,000 - $182,000 a year

The salary range listed is a reasonable estimate of the compensation range for this role based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs.

Why You’ll Want to Join Us

At Coalfire, youll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where youll work most effectively whether youre at home or an office.

Regardless of location, youll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. Youll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And youll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

• paid parental leave
• flexible time off
• certification and training reimbursement
• digital mental health and wellbeing support membership
• comprehensive insurance options

At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [e-mail].

PI286792904