Senior Security & Infra Engineer — FedRAMP & AWS

Forerunner; United States; Hybrid; USD 195,000 - 220,000; Full time

Benefits offered by this job

Competitive compensation

Health/vision/dental coverage

401k plan

One expensed lunch per week

Quarterly wellness reimbursement

Job summary

Forerunner is seeking a Senior Security & Infrastructure Engineer in the United States to own security and compliance for our AWS infrastructure end-to-end, driving FedRAMP authorization forward.

You will partner with our compliance lead and engineering to embed security as defaults, build IaC, and coordinate with 3PAO during assessments, while supporting production readiness and secure CI/CD workflows.

Qualifications

• FedRAMP authorization experience (Agency or JAB, Moderate or above).
• Strong AWS experience and IaC fundamentals.
• Ability to write control narratives and fix Terraform as described.
• Experience with SOC 2, StateRAMP, TX-RAMP and monitoring tools.
• Nice to have: Node/TypeScript environments, PostGIS, GovTech or public sector delivery.

Responsibilities

• Own the security and compliance posture of AWS infrastructure (us-east-1 commercial, Moderate).
• Drive FedRAMP execution with the compliance lead and 3PAO coordination.
• Hardening and modernization of production infrastructure: IaC, network segmentation, secrets management, logging and detection in Datadog, incident response.
• Integrate compliance into CI/CD and developer workflows.
• Collaborate with engineering (~12 people, two product teams) so security decisions land as defaults.

Skills

AWS expertise

Infrastructure as Code

Terraform

SOC 2

StateRAMP

TX-RAMP

Threat modeling

Node/TypeScript

Tools

Datadog

Terraform

Job description

Forerunner is seeking a Senior Security & Infrastructure Engineer in the United States to own security and compliance for our AWS infrastructure end-to-end, driving FedRAMP authorization forward.

You will partner with our compliance lead and engineering to embed security as defaults, build IaC, and coordinate with 3PAO during assessments, while supporting production readiness and secure CI/CD workflows.