Principal, Public Sector Compliance

Cohesity; Washington; On-site; USD 198,000 - 248,000; Full time

Benefits offered by this job

Health benefits

Bonus potential

Equity grants

Job summary

Cohesity is seeking a Principal, Public Sector Compliance to own FedRAMP Class C (Rev5), GovRAMP Moderate, and CMMC Level 1/2 for a named-ownership role. You will manage continuous monitoring, annual assessments, and regulatory transitions, with autonomy across compliance, engineering, and product.

You’ll drive a federal product roadmap, coordinate with Product Management and Federal Sales, and contribute to AI-enabled compliance programs that scale across the organization.

Qualifications

• 8–10 years of hands-on FedRAMP program experience, including ownership of a CSP authorization through multiple 3PAO cycles.
• Operational depth in continuous monitoring and POA&M management.
• Experience with regulatory transitions and risk management in federal cloud environments.

Responsibilities

• Own authorization integrity for FedRAMP Class C, GovRAMP Moderate, and CMMC L1/L2.
• Govern the significant change process and ensure proper triggers are communicated.
• Lead regulatory transitions and adopt FedRAMP Consolidated Rules.
• Serve as primary interface for third-party assessors for annual FedRAMP and GovRAMP assessments.
• Translate control requirements into engineering acceptance criteria.
• Partner with Product Management and Federal Sales to shape a compliant offering.
• Build AI-enabled compliance artifacts and automate evidentiary standards.

Skills

FedRAMP program experience

3PAO assessment cycles

Continuous monitoring

Tools

ConMon processes

POA&M management

Job description

THE OPPORTUNITY

We’re hiring a Principal, Public Sector Compliance to own our public sector authorization portfolio — FedRAMP Class C (Rev5), GovRAMP Moderate, and CMMC Level 1 and Level 2. This is a named-ownership role: you’ll maintain and advance our FedRAMP certification through continuous monitoring and annual assessments, lead the organization through mandatory 2026-2027 regulatory transitions, and shape a federal product roadmap that lets Cohesity compete with peer cloud service providers. You’ll sit at the intersection of compliance, engineering, and product, with full operating autonomy and significant cross‑functional influence.

WHAT YOU’LL DO HERE

• Own authorization integrity. Maintain Cohesity’s FedRAMP Class C, GovRAMP Moderate, and CMMC L1/L2 certifications. Lead continuous monitoring (ConMon) efforts and maintenance of required documentation.
• Govern the authorized boundary. Manage the significant change process, including review and sign off on changes, and ensuring engineering and infrastructure teams understand what triggers a formal notification requirement.
• Lead regulatory transitions. Drive adoption of FedRAMP’s Consolidated Rules, including new VDR/VER rulesets, and develop a defensible Rev5-to-20x conversion recommendation. Stay informed about evolving framework requirements and translate operational implications to leadership.
• Own assessment cycles. Serve as the primary interface for third‑party assessors across annual FedRAMP and GovRAMP assessments and the triennial CMMC Level 2 assessment — readiness, facilitation, evidence gathering, and finding remediation.
• Translate compliance into engineering guidance. Convert control requirements into acceptance criteria that engineering and cloud operations teams can act on, and challenge implementations that fall short.
• Shape the federal offering. Partner with Product Management and Federal Sales to deliver a compliant offering that supports business growth and drives competitive advantage.
• Build the AI‑enabled compliance program. Own machine‑readable, AI‑consumable artifact schemas, set the evidentiary standard automated work must meet, and help move the program from human‑heavy to agent‑leveraged operations.

WHAT YOU’LL BRING

• 8–10 years of hands‑on FedRAMP program experience, including named ownership of a Cloud Service Provider authorization through multiple full 3PAO assessment cycles at Moderate and High impact levels. Direct accountability for the SSP, Collaborative ConMon, POA&M, significant change management, and 3PAO
• Operational depth in continuous monitoring, including POA&M management, vulnerability management,ConMon deliverable production, and federal agency sponsor relationship management.

WHY JOIN COHESITY

You’ll take on named ownership of a growing public sector compliance program at a pivotal moment — helping
Cohesity expand its federal authorization footprint, compete for new agency business, and build the AI‑enabled
compliance practices that will define how the next generation of cloud service providers operate.

#LI-RB1

Disclosure Pursuant to Applicable State Equal Pay Transparency Laws - This position has a starting pay range as listed below. Actual salary depends upon many factors, including a candidate’s skills, qualifications and experience, location, and salary expectations, and therefore a starting salary at the low end, high end, or even above the stated range may be offered. This position may also be eligible for bonus compensation, commission (if in a sales function), and/or equity grants. Additionally, full-time employees are eligible to participate in ourcomprehensive benefits framework, including health and wellness benefits, vacation, paid holidays and refresh days, 401(k) retirement plan, life and disability insurance coverages, and other benefits the Company may offer from time to time.

Pay Range :

$198,000.00-$247,500.00

The compensation noted above is based on an annualized hourly rate assuming normal full‑time employment.

_Data Privacy Notice for Job Candidates:

For information on personal data processing, please see our_
Privacy Policy_.

Equal Employment Opportunity Employer (EEOE)

Cohesity is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law.

If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us at 1-855-9COHESITY or
[e-mail] _for assistance.

In-Office Expectations

Cohesity employees who are within a reasonable commute (e.g. within a forty‑five (45) minute average travel time) work out of our core offices 2‑3 days a week of their choosing.

Interested candidates based outside of the designated areas are welcome to apply, provided they have the right to work in the job location.