GRC Engineer - GOV (FedRAMP 20x)

Jobgether

United States2d ago

Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.

Key details

Location
United States
Work style
Remote
Level
Mid level
Job type
Full-time
Experience
2–5 yrs
Function
IT & Security operations
Focus area
other
Posted
2d ago

Skills

cloud securitycybersecurityfedrampgrcjsonnistsecurity monitoringsoftware architectureyaml

About the role

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a GRC Engineer – GOV (FedRAMP 20x) based in the United States.

Join a fast-growing cybersecurity and compliance environment helping organizations strengthen their security posture and meet demanding federal requirements. In this hands-on role, you will support government compliance initiatives by translating regulatory standards into practical, technology-driven solutions. You will contribute to FedRAMP 20x certification efforts, automated evidence collection, and continuous security monitoring. Working closely with client engineering teams, compliance professionals, and independent assessors, you will help organizations identify and remediate security gaps. You will use tools and technologies such as OSCAL, JSON, YAML, cloud security platforms, and policy-as-code solutions to improve compliance efficiency. This opportunity offers close collaboration with experienced practitioners, ongoing mentorship, and exposure to evolving federal cybersecurity frameworks. If you are detail-oriented, technically curious, and passionate about security automation, this role offers an opportunity to make a meaningful impact on the security of government and defense-related systems.

Accountabilities

    • FedRAMP 20x Compliance Execution: Analyze and apply FedRAMP Consolidated Rules (CR26) and the 46 Key Security Indicators (KSIs) across 10 control families to help ensure that software architectures meet applicable federal security requirements.

    • Machine-Readable Compliance Documentation: Create, update, and maintain technical certification artifacts, including Security Decision Records, Security Configuration Guides, and OSCAL-based documentation using JSON and YAML in accordance with applicable technical specifications and federal guidance.

    • Automated Evidence Collection: Build, implement, and maintain automated evidence pipelines that continuously validate security controls and KSIs, reducing reliance on manual, point-in-time audit processes.

    • Readiness and Gap Assessments: Conduct technical readiness reviews, map security controls, and assess compliance against FedRAMP 20x Class A, Class B, and Class C baseline requirements.

    • Continuous Security Monitoring: Support Collaborative Continuous Monitoring (CCM) initiatives by integrating cloud security posture management (CSPM) and governance, risk, and compliance (GRC) tools into monitoring workflows that provide ongoing security validation.

    • Third-Party Assessment Support: Coordinate evidence collection, documentation submissions, and assessment logistics for Third-Party Assessment Organization (3PAO) audits and independent security assessments under senior team guidance.

    • Security Remediation: Collaborate with client and internal technical teams to investigate compliance deficiencies and implement remediation measures across cloud and multi-cloud environments.

    • Regulatory Monitoring: Track changes to CR26 requirements, Significant Change Notifications (SCNs), and the transition from FedRAMP Rev. 5 to FedRAMP 20x to help maintain alignment with evolving federal standards.

    • Client Collaboration: Work directly with client engineering and compliance stakeholders to communicate findings, coordinate deliverables, and ensure progress across multiple compliance workstreams.

    • Project and Delivery Management: Manage concurrent technical tasks, maintain accurate documentation, meet deadlines, and escalate risks or blockers promptly while working under senior guidance.

      • Requirements

      • Professional Experience: At least 2 years of direct technical experience delivering governance, risk, and compliance (GRC) work involving NIST SP 800-53, FedRAMP, or federal security authorization programs.

      • FedRAMP 20x Knowledge: Foundational understanding of the FedRAMP 20x certification model, Class A/B/C classifications, CR26

Get jobs like this as soon as they're posted

JobSuited checks company career sites all day and ranks every opening against your profile. Free to join.

Create a free account