Workstreet
Workstreet
Workstreet — бизнеске қауіпсіздік бағдарламаларын құруға, басқаруға және жетілдіруге көмектесетін киберқауіпсіздік пен сәйкестік қызметтерін ұсынатын компания. Оның қызметтері SOC 2, ISO 27001, HIPAA және GDPR талаптарына дайындықты, сондай-ақ виртуалды CISO қызметтерін, ену тестілерін және жеткізушілер тәуекелдерін басқаруды қамтиды. Workstreet стратегиялық кеңес беруді практикалық қауіпсіздік қолдауымен ұштастырып, B2B ұйымдарына өсу барысында сәйкестік талаптарын орындауға және қауіпсіздік операцияларын нығайтуға көмектеседі.

GRC Engineer, FedRAMP 20x

Automate FedRAMP 20x evidence collection and compliance workflows for federal organizations and defense contractors. Help teams prepare for authorization and maintain continuous monitoring.

Сипаттама

  • Validate FedRAMP 20x controls against CR26 and 46 KSIs across 10 families.
  • Create and maintain machine-readable Security Decision Records, Security Configuration Guides, and OSCAL, JSON, and YAML documentation that follows RFC-0024 and OMB M-24-15.
  • Build and maintain automated evidence pipelines for ongoing KSI validation.
  • Review technical readiness, assess gaps, and map controls to FedRAMP 20x Class A, B, and C baselines.
  • Connect CSPM and GRC tools to agency pipelines to support Collaborative Continuous Monitoring.
  • Coordinate evidence submissions and logistics for 3PAO audits and independent assessments with senior guidance.
  • Work with internal and client technical teams to address security gaps across multi-cloud environments.
  • Track CR26 updates, Significant Change Notifications, and the transition schedule from Rev5 to 20x.
  • Work directly with client engineering and compliance leads.
  • Handle several compliance tasks at once with senior guidance during U.S. Eastern Time business hours.

Талаптар

  • At least two years of direct technical experience delivering GRC work involving NIST SP 800-53, FedRAMP, or federal authorization lifecycles.
  • Basic knowledge of FedRAMP 20x Class A, B, and C program certifications, CR26 rules, and KSI-based validation.
  • Practical experience creating or using technical compliance artifacts with OSCAL, JSON, or YAML schemas.
  • Practical exposure to AWS, Azure, GCP, AWS GovCloud, or Azure Government.
  • Working knowledge of Python, Rego/OPA, Terraform, or other scripting or policy-as-code tools.
  • Ability to coordinate several federal compliance tasks at the same time.
  • Strong written and spoken English communication skills.
  • A recognized security certification, such as CompTIA Security+, CGRC, CAP, or Associate of CISSP.
  • A technical cloud certification, such as AWS Solutions Architect Associate, Azure Security Engineer Associate, or GCP Associate Cloud Engineer.
  • Experience taking part in 3PAO audits or supporting active agency ATO evaluations.
  • Experience supporting FedRAMP ConMon or Collaborative Continuous Monitoring (CCM) workflows.
  • Familiarity with CMMC 2.0 or NIST SP 800-171 requirements.
  • Reliable, high-speed internet and a professional home office.
  • Availability from 8:00 a.m. to 5:00 p.m. U.S. Eastern Time, with occasional flexibility.
  • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities.
  • Must be authorized to work in the U.S. now and in the future without visa sponsorship.
  • Must complete live video interviews with the camera on and verify identity during recruitment and onboarding.
  • Employment is contingent on identity verification and background screening where permitted by law.

Артықшылықтар

  • Career development through mentorship and training opportunities.
  • Reimbursement for approved training and certification courses relevant to the role.
  • Competitive base salary, regular performance reviews tied to merit-based assessments, and bonus opportunities.
  • Strong opportunities for career progression.
  • Remote-first work flexibility.
  • Ability to work from anywhere while collaborating with a global team.

Ұқсас жұмыс орындары

AT&T

Senior Software Engineer, AI Integration and Data Platforms

AT&T

Build AI integrations, MCP servers, APIs, and cloud-native services at AT&T. Use Python and Azure DevOps to support secure automation and enterprise data connectivity.

Ашу
PNC

Lead Software Engineer, Data and Automation (MLOps)

PNC

Lead development of data platforms, MLOps, and cloud automation at PNC. Build secure enterprise solutions using Azure, AWS, and modern data processing technologies.

Ашу
Regions Bank

Cloud Data Engineer, AI Platform — Regions Bank (Hybrid, Hoover, AL)

Regions Bank

Build cloud data pipelines and AI applications for Regions Bank, supporting machine learning, analytics, and enterprise data systems. The role is hybrid in Hoover, Alabama.

Ашу
Henry Schein

Staff Data Engineer

Henry Schein

Lead technical strategy for scalable data platforms, streaming, and analytics at Henry Schein One, supporting dental practice technology. Advance reliability and engineering practices while guiding technical delivery.

Ашу
Imaginary Cloud

Senior Data Engineer – Databricks and PySpark

Imaginary Cloud

Build Databricks and PySpark data workloads for Imaginary Cloud’s digital products. Improve analytics pipelines for global clients in a hybrid role based in Portugal.

Ашу
Nakupuna Companies

Senior Software Engineer, .NET and Azure

Nakupuna Companies
1 001 – 5 000 Қызметкерлер
КонсалтингЛогистикаҮкімет

Modernize NAVSUP supply systems for Nakupuna Federal by building secure applications, APIs, and CI/CD pipelines. Support Department of Defense clients.

Ашу
Acxiom
KAYAK

Senior Front-End Software Engineer, Retention

KAYAK

Build and improve retention features for KAYAK’s travel search products. Partner with product and design teams to deliver, test, and optimize user-facing experiences.

Ашу