Senior AWS Security & Infrastructure Engineer — FedRAMP

Forerunner; United States; Hybrid; USD 195,000 - 220,000; Full time

Benefits offered by this job

Health/vision/dental coverage

401(k) plan

Expensed lunch per week

Quarterly wellness reimbursement

Job summary

Forerunner is hiring a Senior Security & Infrastructure Engineer to own security and compliance for our AWS infrastructure end-to-end, from boundary to automation, while advancing our FedRAMP authorization. You will work at the intersection of security engineering, infra, and compliance with our engineering team to make security defaults the norm.

The role emphasizes deep AWS expertise, strong IaC skills, and the ability to write control narratives and implement Terraform.

Qualifications

• FedRAMP authorization experience (Agency or JAB, Moderate or above).
• Deep AWS experience with infrastructure-as-code fundamentals.
• Ability to write control narratives and fix Terraform as described.
• Experience with SOC 2 / StateRAMP / TX-RAMP and continuous monitoring tools.
• Bonus: Node/TypeScript, PostGIS, GovTech or public sector delivery.

Responsibilities

• Own the security and compliance posture of AWS infrastructure (us-east-1) and automation.
• Drive FedRAMP execution with the compliance lead and 3PAO coordination.
• Harden and modernize production infra: IaC, network segmentation, secrets management, logging and detection.
• Integrate compliance into CI/CD and developer workflows.
• Collaborate with engineering teams to land security decisions as defaults.

Skills

AWS

Infrastructure-as-Code

FedRAMP experience

Threat modeling

Security engineering

Tools

Terraform

Datadog

Vanta

Job description

Forerunner is hiring a Senior Security & Infrastructure Engineer to own security and compliance for our AWS infrastructure end-to-end, from boundary to automation, while advancing our FedRAMP authorization. You will work at the intersection of security engineering, infra, and compliance with our engineering team to make security defaults the norm.

The role emphasizes deep AWS expertise, strong IaC skills, and the ability to write control narratives and implement Terraform.