Senior FedRAMP Compliance Engineer US Public Sector

Gem; United States; On-site; USD 174,000 - 238,000; Full time

Job summary

Wiz seeks an experienced Compliance Engineer to lead FedRAMP CR26 initiatives, defining the long-term technical roadmap and architecting comprehensive compliance-as-code solutions. The role bridges regulatory requirements with scalable engineering to ensure cloud services meet federal standards while maintaining high availability, security, and audit-readiness.

You will quickly learn business challenges and simplify processes within our compliance operations to boost productivity and efficiency.

Qualifications

• 6+ years of security engineering, DevOps, and systems work solving security/compliance problems.
• 4+ years with NIST 800-53, FedRAMP High baselines, and DoW SRG overlays to enable compliance.
• Understanding FR 20x vs CR26 rulesets for Rev5 and CSP impacts.
• Cloud-native with DevSecOps tech including CI/CD, containers and Kubernetes.
• Strong scripting and IaC skills: Shell, Python, Terraform/OpenTofu; AI harness tools a plus.
• Experience with government cloud platforms.

Responsibilities

• Lead the FedRAMP Continuous Monitoring technical roadmap, moving to real-time telemetry.
• Translate NIST 800-53 Rev 5 and FedRAMP CR26 into scalable engineering solutions.
• Engineer evidence frameworks, reducing manual effort for 3PAO assessments and automation.
• Perform risk assessments, root-cause analysis, and advise on compensating controls.
• Own technical compliance documentation lifecycle, including SDRs.
• Collaborate cross-functionally with legal, product, eng, DevOps, security, and federal teams.
• Mentor others on FedRAMP/DoW practices and contribute to internal training.

Skills

Security engineering

DevSecOps

Cloud compliance

Scripting

IaC (Terraform/OpenTofu)

Kubernetes

Tools

Terraform/OpenTofu

Kubernetes

CI/CD tooling

Job description

Wiz seeks an experienced Compliance Engineer to lead FedRAMP CR26 initiatives, defining the long-term technical roadmap and architecting comprehensive compliance-as-code solutions. The role bridges regulatory requirements with scalable engineering to ensure cloud services meet federal standards while maintaining high availability, security, and audit-readiness.

You will quickly learn business challenges and simplify processes within our compliance operations to boost productivity and efficiency.