Remote Cloud GRC Engineer — Audit, Compliance & Automation

Peraton; Herndon (VA); Remote; USD 112,000 - 179,000; Full time

Job summary

Peraton is seeking a Cloud Engineer - Governance, Risk, and Compliance (GRC) to lead audits, control testing, and evidence collection across the cloud environment. The role emphasizes automating evidence, managing SSP and security documentation, and coordinating with external auditors.

You will work with AWS-native tools and IaC to implement compliant processes, supporting continuous monitoring and secure cloud operations in a remote setting.

Qualifications

• US citizenship required and ability to obtain/maintain Public Trust clearance.
• 10+ years of combined cloud engineering and GRC/security compliance experience.
• Experience building/maintaining cloud infrastructure and automation (IaC, scripting, cloud-native tooling).
• Experience coordinating with external auditors/assessors and owning security documentation (e.g., SSP).
• Strong knowledge of frameworks: NIST 800-53, CSF, A-123, FISMA, SOC 1/2 Type 2.

Responsibilities

• Own audit and assessment calendar, continuous control assessments, and security audits (SOC 1 II).
• Lead meetings with client, auditors, and assessors across audit lifecycle.
• Develop automated evidence collection and continuous monitoring pipelines using cloud-native services and IaC.
• Manage system authorization/renewal efforts with required documentation and evidence.

Skills

Infrastructure depth

IaC

Automation scripting

Security tooling

Networking basics

GRC tooling

NIST 800-53

Communication

Stakeholder management

Education

Bachelor's degree in Computer Science / related field

Master's degree (preferred)

High School diploma with extensive experience

Tools

Terraform

CloudFormation

Wiz

Prisma Cloud

SIEM

EDR

AWS Config

Security Hub

Job description

Peraton is seeking a Cloud Engineer - Governance, Risk, and Compliance (GRC) to lead audits, control testing, and evidence collection across the cloud environment. The role emphasizes automating evidence, managing SSP and security documentation, and coordinating with external auditors.

You will work with AWS-native tools and IaC to implement compliant processes, supporting continuous monitoring and secure cloud operations in a remote setting.