Full-Time

Principal Cloud Engineer

Coalfire

Coalfire

1,001-5,000 employees

Cybersecurity advisory and cloud security services

Compensation Overview

$109k - $182k/yr

No H1B Sponsorship

Remote in USA

Remote

Remote within the United States; occasional travel up to 10-15%.

US Citizenship Required

Bachelor's

Category
Cybersecurity (1)
Required Skills
FedRAMP
Microsoft Azure
AWS
Terraform
DevOps
Google Cloud Platform

Get referred to Coalfire

See people who can refer or advise you

Requirements
  • BS or above in a related Information Technology field or equivalent combination of education and experience
  • 10+ years in cloud security engineering and architecture, including principal- or staff-level scope
  • Hands-on FedRAMP authorization experience—building, operating, or assessing FedRAMP environments
  • Demonstrated design-authority experience: owning standards, running architecture review, and documenting decisions in a form other engineers build from
  • Deep expertise in infrastructure-as-code (Terraform or equivalent), CI/CD, policy-as-code, and compliance automation
  • Architecture depth on at least two of the three major cloud platforms (AWS, Azure, GCP)
  • Fluency in NIST 800-53 and the FedRAMP control framework, as well as CMMC and DoD compliance standards
  • Excellent communication, organizational, and problem-solving skills
  • Effective documentation skills, including technical diagrams and written descriptions
  • Ability to work independently and as part of a team with a professional attitude and demeanor
  • Critical thinking, and the ability to balance security requirements with mission needs
  • Professional/Expert-level certification in at least one major cloud platform (AWS, Azure, or GCP)
  • U.S. citizenship is required

Coalfire provides cybersecurity advisory and managed services to help organizations protect digital assets and secure cloud environments. Its offerings include risk assessments, threat and vulnerability management, compliance assessments, third‑party risk management, and cloud security consulting plus managed security services. It differentiates itself with a focus on regulated industries (HIPAA, HITRUST) and end-to-end services that cover both advisory guidance and ongoing security operations for scalable, compliant cloud deployments. Its goal is to reduce cyber risk and help clients meet regulatory requirements while advancing cybersecurity education through initiatives like the Richard E. Dakin Fund.

Company Size

1,001-5,000

Company Stage

Series B

Total Funding

$9.4M

Headquarters

Westminster, Colorado

Founded

2001

Get referred to Coalfire

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • August 4, 2026 Managed and Transformation Services targets recurring security revenue.
  • May 18, 2026 CPAN expands Coalfire Federal into CMMC-driven defense demand.
  • March 2026 Google Cloud and Drata deals signal stronger platform attach and pipeline leverage.

What critics are saying

  • Coalfire still sells trust in a market increasingly crowded by Drata and Wiz.
  • April 21, 2026 Google Cloud integration deepens partner dependence and weakens pricing power.
  • Dallas County paid $600,000 in January 2026, keeping Coalfire's pentest liability narrative alive.

What makes Coalfire unique

  • Coalfire pairs independent assessments with tools like Compliance Essentials and FastRAMP.
  • March 10, 2026 Drata partnership fuses continuous monitoring with Coalfire validation.
  • August 3, 2026 Wiz alliance and Google Marketplace reach embed compliance into operations.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Flexible Work Hours

Remote Work Options

Parental Leave

Unlimited Paid Time Off

Professional Development Budget

Mental Health Support

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

0%

2 year growth

1%
Yahoo Finance
Aug 3rd, 2026
Coalfire joins Wiz Partner Alliance to merge cloud security with compliance management

Coalfire has joined the Wiz Partner Alliance to combine cybersecurity services with cloud security technology. The partnership will integrate Wiz's platform into Coalfire's cloud posture assessment, exposure management, and compliance management services. The collaboration aims to connect security and compliance for cloud customers in regulated industries. Coalfire brings compliance expertise, cloud engineering, and managed security capabilities, whilst Wiz provides cloud-native visibility and risk analysis tools. "Exposure Management Powered by Wiz" will launch on the Google Marketplace. The partnership offers customers flexible options ranging from one-time cloud assessments to continuous compliance monitoring. Services will include managed posture analysis, attack path review, and drift governance, helping organisations transition from periodic manual reviews to ongoing operational support.

PR Newswire
May 19th, 2026
Coalfire launches CMMC Partner Assurance Network to accelerate defence supply chain compliance

Coalfire has launched the CMMC Partner Assurance Network (CPAN), a collaborative ecosystem designed to help Defence Industrial Base organisations navigate Cybersecurity Maturity Model Certification compliance. The marketplace connects defence suppliers with vetted partners supporting readiness, implementation, certification and ongoing compliance. CPAN aims to reduce supply chain risk and accelerate compliance timelines. The network addresses cyber risk concentrated in lower-tier suppliers, where non-compliant subcontractors can jeopardise contract eligibility. The platform provides prime contractors with improved supplier readiness visibility whilst giving subcontractors access to trusted providers, technical guidance and training. CEO Brad Little described CMMC as one of the most significant cybersecurity transformations the Defence Industrial Base has experienced in decades, positioning CPAN as a solution to reduce fragmentation and confusion.

PR Newswire
May 7th, 2026
Fortra pursues FedRAMP High authorization for Data Classification capabilities.

Fortra pursues FedRAMP High authorization for Data Classification capabilities. May 07, 2026, 10:00 ET Advancing Secure Data Classification for U.S. Government Missions MINNEAPOLIS, May 7, 2026 /PRNewswire/ - Fortra today announced it is pursuing Federal Risk and Authorization Management Program (FedRAMP) High authorization for its data classification capabilities, which will further extend its support of U.S. public sector, federal, and defense organizations operating in critical cloud environments. FedRAMP High, required for systems that process the government's most sensitive unclassified data, is the U.S. government's most stringent cloud security authorization. By pursuing this authorization, Fortra aims to enable secure discovery, classification, and movement of data across contested, classified, and disconnected operational environments. "Data classification is the backbone of secure defense collaboration - if it isn't built in from the start, everything else fails," said John Grancarich, EVP, Head of Defense and Intelligence, Fortra. "Pursuing FedRAMP High reflects our long-term commitment to delivering advanced, trusted data security capabilities to government and national security organizations worldwide." Fortra is partnering with Coalfire, a leading cybersecurity advisory firm and accredited Third-Party Assessment Organization (3PAO), to support its FedRAMP High authorization activities. The effort includes significant internal investment in security engineering, compliance maturity, and operational rigor aligned with federal requirements. "Coalfire is proud to support Fortra in pursuing FedRAMP High authorization - an undertaking that demands rigorous security engineering and deep compliance expertise, and one that will ultimately strengthen how federal and defense organizations protect their most sensitive data in the cloud," said Karen Laughton EVP, Advisory Services at Coalfire. Fortra's commitment to FedRAMP demonstrates its broader strategy to deliver advanced security solutions to highly regulated and mission-driven sectors with integrated, resilient cybersecurity solutions. About Fortra Fortra delivers AI-amplified cybersecurity solutions that help organizations use and protect data with confidence. Powered by purpose-built AI, highly unique data sources and intelligence, and modular delivery, Fortra enables organizations to reduce AI risk, identify threats faster, and strengthen their cyber posture. Learn more about the market's most comprehensive cybersecurity platform at fortra.com. SOURCE Fortra

PR Newswire
Apr 21st, 2026
Coalfire integrates compliance platform with Google Cloud to automate audit readiness

Coalfire, a cybersecurity services company, will integrate its Compliance Essentials platform with Google Cloud's Compliance and Audit Manager to embed compliance and audit readiness directly into cloud operations. The integration aims to reduce audit friction by combining automated, real-time compliance signals with audit capabilities. It addresses the gap between cloud-native evidence collection and formal audit validation, transforming compliance from a periodic activity into an on-demand operational capability. Google Cloud will provide continuous compliance signals across customer workloads, whilst Coalfire will contribute professional assessment and validation expertise. The collaboration targets highly regulated enterprises adopting cloud technologies, enabling them to maintain continuous audit readiness whilst simplifying compliance management. Coalfire, headquartered in Chicago, is the foremost provider of FedRAMP compliance assessments in the United States.

Woodburn Independent
Apr 21st, 2026
Coalfire to operationalize Cloud Compliance with Google Cloud.

Coalfire to operationalize Cloud Compliance with Google Cloud. PR Newswire Today at 5:03am PDT Customers benefit from reduced complexity and shortened time to certification CHICAGO, April 21, 2026 /PRNewswire/ - Coalfire, an industry-leading cybersecurity services and solutions company, today announced it will integrate its Compliance Essentials platform with Google Cloud's Compliance and Audit Manager. This will enable compliance and audit readiness to be embedded directly into cloud operations. Coalfire and Google Cloud aim to help organizations reduce audit friction by unifying automated, real-time compliance signals with trusted audit and assessment capabilities. Through the integration of Google Cloud Compliance and Audit Manager with Coalfire's Compliance Essentials platform, customers gain a unified, automated approach to compliance that reduces complexity and shortens the time required to achieve certification. This integration aligns cloud operations, compliance automation, and audit execution into a cohesive experience, allowing regulated organizations to accelerate innovation, scale securely, and maintain trust without compromising operational efficiency. Coalfire also will work to address the long-standing gap between cloud-native evidence collection and formal audit validation. Google Cloud provides continuous, real-time compliance signals across customer workloads, while Coalfire contributes professional assessment and validation expertise. The result is a unified view in which technical evidence generated within Google Cloud is validated by Coalfire auditors, thus transforming compliance from a periodic, point-in-time activity into an on-demand operational capability. Brad Little, CEO, Coalfire, said: "Cloud modernization only works when security, compliance, and trust are engineered into the program, rather than bolted on later as an afterthought. This collaboration underscores our commitment to supporting highly regulated enterprises as they adopt cloud technologies with confidence. By combining Google Cloud's scalable compliance automation with Coalfire's deep audit and assurance expertise, customers can maintain continuous audit readiness while simplifying how compliance is managed across their cloud environments." Michael Bachman, VP and GM, Cloud Foundations, Google Cloud, said: "At Google Cloud, we are focused on making security and compliance seamless for our customers. By integrating Google Cloud's Compliance and Audit Manager with Coalfire's assessment expertise, we are bridging the gap between automated evidence collection and formal audit validation. This collaboration enables customers to reduce audit friction, minimize complexity, and transform compliance from a periodic burden into a continuous, on-demand capability." For more details on this collaboration, please visit here. About Coalfire: Coalfire, headquartered in Chicago, Ill., is a global services and solutions company that specializes in cyber advisory, assessment, and security. The company also develops cutting-edge technology platforms that automate defenses against security threats for the world's leading enterprises, cloud providers, and SaaS companies. Coalfire is the foremost provider of FedRAMP compliance assessments and penetration testing services in the United States. For more information, visit www.coalfire.com and follow LinkedIn, Twitter, and Facebook. Media Contact Corey Eldridge Force4 Technology Communications [email protected] SOURCE Coalfire This is a paid placement. For further inquiries, please contact PR Newswire directly.