Coalfire

Cybersecurity advisory and cloud security services

Engagement Architect - Cloud Architecture, FedRAMP

Cloud EngineeringConfirmed live in the last 24 hours

Full-timeRemote in USA$89k - $149k /yr

About the Job

Requirements

A BS or above in a related Information Technology field, or an equivalent combination of education and experience.
At least 8 years of experience in cloud engineering or architecture, including at least 3 years leading technical delivery for external clients.
Experience leading FedRAMP builds or authorizations, or equivalent depth in another regulated cloud regime such as DoD impact levels, StateRAMP, PCI, or HIPAA.
Hands-on skill across infrastructure-as-code, identity and access management, logging and monitoring, and cloud networking on at least one major cloud platform: AWS, Azure, or GCP.
Ability to explain architecture decisions to engineers, project sponsors, or assessors.
Sound judgment about scope, risk, and when to escalate.
Effective documentation skills, including technical diagrams and written descriptions.
Ability to work independently and as part of a team with a professional attitude and demeanor.
Ability to think critically and balance security requirements with mission needs.
Professional-level certification in AWS, Azure, or GCP.

Responsibilities

Own client engagements end-to-end, from contract signature through environment build, control implementation, automated evidence pipelines, and handoff to managed operations.
Instantiate Coalfire’s reference architecture for the contracted certification level and cloud platform, adapting it to the client’s application and boundary.
Lead implementation of security controls and the automation that continuously validates them as evidence for FedRAMP certification.
Coordinate Coalfire’s engineering teams as they deploy capabilities, including identity, monitoring, and change management, into the engagement.
Drive the build through defined quality gates, ensuring every in-scope control is implemented, validated, and stable for transition to operations.
Serve as the client’s primary technical counterpart by running technical working sessions, managing milestones and risks, and keeping scope accurate.
Document architecture decisions and feed lessons from each build back into Coalfire’s standards.
Travel 10–25%, driven by client needs.

Desired Qualifications

Familiarity with FedRAMP 20x, Key Security Indicators, and machine-readable compliance artifacts such as OSCAL or JSON.
Experience with productized or fixed-price delivery models.
Relevant certifications such as cloud platform professional or security certifications, or CISSP.
Familiarity with configuration baseline standards such as CIS Benchmarks and DISA STIG.
Familiarity with frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, or PCI.
U.S. citizenship is desired because the position supports U.S. federal compliance programs.

Salary Range: 89000 to 149000 (Currency: USD) (Pay period: per-year-salary)

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.

But that’s not who we are – that’s just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

What You'll Do

Own client engagements end-to-end: from contract signature through environment build, control implementation, automated evidence pipelines, and handoff to managed operations.
Instantiate Coalfire’s reference architecture for the contracted certification level and cloud platform, adapting it to the client’s application and boundary.
Lead implementation of security controls and the automation that continuously validates them—the evidence a modern FedRAMP certification runs on.
Coordinate Coalfire’s engineering teams as they deploy their capabilities (identity, monitoring, change management, and more) into your engagement.
Drive the build through defined quality gates, with a clean, measurable transition to operations—every in-scope control implemented, validated, and stable.
Serve as the client’s primary technical counterpart: run technical working sessions, manage milestones and risks, and keep scope honest.
Document architecture decisions and feed lessons from each build back into Coalfire’s standards.
Ability to travel 10–25%, driven by client needs
U.S. citizenship is desired, as this position supports U.S. federal compliance programs.

What You'll Bring

BS or above in a related Information Technology field or equivalent combination of education and experience

8+ years in cloud engineering or architecture, including 3+ years leading technical delivery for external clients

Experience leading FedRAMP builds or authorizations—or equivalent depth in another regulated cloud regime (DoD impact levels, StateRAMP, PCI, HIPAA)

Hands-on skill across infrastructure-as-code, identity and access management, logging and monitoring, and cloud networking on at least one major cloud platform (AWS, Azure, or GCP)

Strong client-facing communication—able to explain an architecture decision to an engineer, a project sponsor, or an assessor

Sound judgment about scope, risk, and when to escalate

Excellent organizational and problem-solving skills

Effective documentation skills, including technical diagrams and written description

Ability to work independently and as part of a team with a professional attitude and demeanor

Critical thinking, and the ability to balance security requirements with mission needs

Professional-level certification in AWS, Azure, or GCP

Bonus Points:

Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable compliance artifacts (OSCAL or JSON)

Experience with productized or fixed-price delivery models

Relevant certifications such as cloud platform professional/security certifications or CISSP

Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG

Familiarity with frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, or PCI

Why You’ll Want to Join Us

At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.

Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].

About the Company

Coalfire

Cybersecurity advisory and cloud security services

Coalfire provides cybersecurity advisory and managed services to protect digital assets and secure cloud environments. Its offerings include risk assessments, threat and vulnerability management, compliance and third-party risk services, and cloud security consulting and managed services. It differentiates itself with a focus on regulated industries, HIPAA and HITRUST expertise, and end-to-end advisory plus security operations for compliant cloud deployments. Its goal is to reduce cyber risk and help clients build secure, compliant cloud infrastructures, while supporting cybersecurity education through the Richard E. Dakin Fund.

Company size: 1,001-5,000
Company stage: Series B
Total funding: $9.4M
Headquarters: Westminster, CO
Founded: 2001

Recently Posted Jobs

Explore more opportunities at Coalfire

See more jobs