Remote FedRAMP Automation Engineer (Compliance)

Iceberg; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Equity

Job summary

Iceberg is seeking a highly technical GRC Engineer who can own FedRAMP (and GovRAMP) end-to-end, from ground-up build to audit readiness. This is an engineering-first role in a fast-growing AI startup environment.

Design scalable, automated compliance systems, embed controls into infrastructure and CI/CD, and work hands-on with engineering to translate regulations into real technical safeguards. Remote in the United States; equity included.

Qualifications

• Proven experience leading FedRAMP end-to-end (from scratch).
• Strong technical background (cloud, infrastructure, security engineering).
• Ability to work directly with engineers at a deep technical level.
• Experience building or automating compliance systems (not just maintaining).

Responsibilities

• Own and lead FedRAMP (and GovRAMP) end-to-end, from early-stage build through to audit readiness and certification.
• Design scalable, engineered compliance systems (not manual processes).
• Automate compliance and control monitoring across cloud environments.
• Translate regulatory requirements into technical controls embedded in infrastructure and workflows.
• Work hands-on with engineering teams to integrate security into systems and CI/CD pipelines.
• Read and understand code (ideally Python) to build or support automation workflows.
• Support customer and sales teams with technical security discussions and compliance queries.
• Drive broader compliance initiatives (SOC2, ISO27001, etc.) where needed.

Skills

FedRAMP end-to-end

GovRAMP experience

Python scripting

Automation

Cloud environments (AWS/GCP/Azure)

CI/CD integration

Engineering mindset

Job description

Iceberg is seeking a highly technical GRC Engineer who can own FedRAMP (and GovRAMP) end-to-end, from ground-up build to audit readiness. This is an engineering-first role in a fast-growing AI startup environment.

Design scalable, automated compliance systems, embed controls into infrastructure and CI/CD, and work hands-on with engineering to translate regulations into real technical safeguards. Remote in the United States; equity included.