Senior Security & Infra Engineer — FedRAMP & AWS

Forerunner; San Francisco (CA); Hybrid; USD 195,000 - 220,000; Full time

Benefits offered by this job

Competitive compensation

Health/Dental/Vision coverage

401k plan

Lunch stipend

Wellness reimbursement

Job summary

Forerunner seeks a Senior Security & Infrastructure Engineer to own the security and compliance posture of our AWS infrastructure end-to-end, driving FedRAMP authorization forward while collaborating with engineering and compliance. You will champion security as a default in our pipelines and production environments.

We are a mission-driven, small team building tools for government and regulated industries to reduce risk and support resilience.

Qualifications

• Candidates have FedRAMP authorization experience (Agency or JAB, Moderate or above).
• Strong AWS infrastructure experience and IaC fundamentals.
• Ability to write control narratives and fix Terraform as described by compliance.
• Experience with SOC 2 / StateRAMP / TX-RAMP and continuous monitoring tools.
• Knowledge of threat modeling and security engineering practices.
• Bonus: Node/TS environments, PostGIS, GovTech/public sector delivery.

Responsibilities

• Own the security and compliance posture of our AWS infrastructure (us-east-1 commercial, Moderate target).
• Drive FedRAMP execution with our compliance lead: machine-readable evidence, control implementation, 3PAO coordination.
• Harden and modernize production infra: IaC, network segmentation, secrets management, logging in Datadog, incident response.
• Integrate security into CI/CD and developer workflows rather than bolting on.
• Partner with engineering teams so security decisions land as defaults.

Skills

FedRAMP authorization

AWS

Infrastructure as Code

SOC 2 / StateRAMP / TX-RAMP

Threat modeling

Node/TypeScript

PostGIS

GovTech/public sector delivery

Datadog

Tools

Datadog

Job description

Forerunner seeks a Senior Security & Infrastructure Engineer to own the security and compliance posture of our AWS infrastructure end-to-end, driving FedRAMP authorization forward while collaborating with engineering and compliance. You will champion security as a default in our pipelines and production environments.

We are a mission-driven, small team building tools for government and regulated industries to reduce risk and support resilience.