Remote GRC Cloud Engineer: Audit & Compliance Automation

Peraton; New York (NY); Remote; USD 170,000 - 240,000; Full time

Job summary

Peraton is seeking a Cloud Engineer focused on Governance, Risk, and Compliance (GRC) to modernize audit, risk, and compliance management. This senior role drives automated evidence collection, SSP ownership, and cloud-control documentation across the deployment.

You will lead audit calendars, coordinate with auditors, improve reporting, and ensure continuous compliance in a cloud environment, reporting to senior stakeholders from a remote workspace.

Qualifications

• U.S. Citizen with ability to obtain Public Trust clearance.
• Bachelor's degree and 12+ years, or Master's and 10+ years, or HS diploma/equivalent with 16 years' experience.
• 10+ years in cloud engineering and GRC/IT audit with hands-on depth.
• Experience building/maintaining cloud infrastructure and automation (IaC, scripting) in production.
• Experience as primary contact with external auditors and owning SSP and control docs.

Responsibilities

• Own the audit and assessment calendar, continuous control assessments, and security audits (e.g., SOC 1 II).
• Lead meetings with client, auditors, and assessors; represent control environment to stakeholders.
• Support penetration testing, red/purple/white team exercises, and high-value asset assessments.
• Maintain SSP updates and review controls against NIST 800-53 baseline.

Skills

Security clearance

Cloud engineering

GRC

Automation

IaC

Auditing coordination

Control implementation

Education

Bachelor's degree

Master's degree

High School diploma

Tools

Terraform

CloudFormation

Python

PowerShell

AWS

Job description

Peraton is seeking a Cloud Engineer focused on Governance, Risk, and Compliance (GRC) to modernize audit, risk, and compliance management. This senior role drives automated evidence collection, SSP ownership, and cloud-control documentation across the deployment.

You will lead audit calendars, coordinate with auditors, improve reporting, and ensure continuous compliance in a cloud environment, reporting to senior stakeholders from a remote workspace.