Senior FedRAMP & DoD GRC Lead

Socket.dev; Washington (District of Columbia); Hybrid; USD 158,000 - 184,000; Full time

Benefits offered by this job

Benefits

Equity (if applicable)

Bonus (if applicable)

Job summary

Peregrine is seeking a senior Governance, Risk, and Compliance leader to own FedRAMP High and establish security foundations for DoD IL4-6 deployments. Based in Washington, DC, this hybrid role requires active U.S.

security clearance and the ability to translate complex federal requirements into implementable controls across Security, Engineering, Product, Legal, and Federal Deployment. You will orchestrate assessment, authorization, continuous monitoring, and evidence collection, shaping

Qualifications

• 10+ years in information security, GRC, security assurance, or risk management.
• Led FedRAMP High authorization for a cloud service provider (CSP).
• Experience with RMF, 3PAO engagement, and agency/Authorizing Official interactions.
• Active U.S. government security clearance and U.S. citizenship.

Responsibilities

• Own FedRAMP High authorization program and maintain ATO.
• Translate requirements into controls for IL4/IL5/IL6 deployments.
• Lead agency-specific system authorizations from engagement to ATO.
• Evaluate system boundaries, IAM, network security, encryption, and logging.
• Produce artifacts, evidence, and monitoring deliverables.
• Drive findings to closure and improve assurance program.
• Advise on procurements and customer security reviews.

Skills

FedRAMP program management

RMF & DoD guidance

NIST SP 800-53 / 800-37

Cloud security design (AWS GovCloud)

ICAM / IAM

Compliance automation

Security communications

Federal procurement guidance

Tools

AWS GovCloud

Kubernetes

Infrastructure as Code

CI/CD pipelines

OSCAL

Job description

Peregrine is seeking a senior Governance, Risk, and Compliance leader to own FedRAMP High and establish security foundations for DoD IL4-6 deployments. Based in Washington, DC, this hybrid role requires active U.S.

security clearance and the ability to translate complex federal requirements into implementable controls across Security, Engineering, Product, Legal, and Federal Deployment. You will orchestrate assessment, authorization, continuous monitoring, and evidence collection, shaping