FedRAMP Cloud Security & Compliance Engineer

Hybrid • Posted 1 day ago • Updated 1 hour ago

Contract Corp To Corp

Contract W2

Contract Independent

Hybrid

Fitment

Dice Job Match Score™

⭐ Evaluating experience...

Job Details

Skills

Security Architecture
Continuous Monitoring
Mapping
Vulnerability Scanning
Authorization
NIST SP 800 Series
Access Control
Change Management
Content Management
Configuration Management
Impact Analysis
Information Assurance
Information Architecture
Investor Relations
International Relations
Information Retrieval
Profit And Loss
Regulatory Affairs
Adobe AIR
Security Clearance
Google Cloud Platform
Google Cloud
Cloud Security
CISSP
CISM
Cisco Certifications
TOGAF
Enterprise Architecture
Documentation
Network
Virtual Private Cloud
NAT
Encryption
Hierarchical Storage Management
Cloud Computing
Auditing
SIEM
Regulatory Compliance
FedRAMP
NIST 800-53
FIPS
SSP
Terraform
Technical Direction

Summary

JOB DESCRIPTION

FedRAMP Cloud Security & Compliance Engineer

Cloud Platform	Google Cloud Platform (Google Cloud Platform)
Framework	FedRAMP Moderate \| NIST SP 800-53 Rev 5

Position Summary

Seeking an experienced FedRAMP Cloud Security & Compliance Engineer to drive end-to-end FedRAMP Moderate authorization of an enterprise data platform on Google Cloud Platform. This role spans platform security architecture, SSP development, 3PAO assessment preparation, and Continuous Monitoring (ConMon) standup across a 7-phase authorization lifecycle.

Key Responsibilities

Lead SSP development aligned to FedRAMP Moderate baseline (325 controls) and NIST SP 800-53 Rev 5
Build control inheritance models mapping shared, leveraged, and inherited controls from Google Cloud Platform infrastructure
Design secure Google Cloud Platform architecture: VPC Service Controls, Cloud Armor, SCC, Chronicle SIEM, Cloud KMS/HSM
Implement landing zones supporting single-tenant, multi-tenant, and air-gapped deployment models
Prepare all FedRAMP package artifacts: SSP, POA&M, IRP, CMP, CIS, PRP, DFDs
Coordinate 3PAO pre-review, assessment scope, and evidence collection
Design and stand up ConMon program with automated vulnerability scanning and drift detection
Author technical control narratives and maintain NIST-to-Google Cloud Platform service traceability

Required Qualifications

5+ years cloud security/compliance with 2+ FedRAMP authorization cycles (Moderate or High)
Deep hands-on Google Cloud Platform security experience: VPC-SC, Cloud Armor, SCC, IAM, Cloud KMS, Cloud Logging
Expert NIST SP 800-53 Rev 5 knowledge (AC, AU, CA, CM, CP, IA, IR, PL, RA, SA, SC, SI families)
Proven SSP, CIS, and POA&M authoring experience; 3PAO assessment preparation
Experience with air-gapped / disconnected high-security architectures
U.S. citizenship or Public Trust clearance eligibility

Preferred

Google Cloud Platform Professional Cloud Security Engineer certification; CISSP, CISM, CAP, or CCSP
FedRAMP Rev 5 transition, OSCAL automation, Terraform/IaC compliance-as-code
TOGAF familiarity for enterprise architecture documentation

Core Technology Stack

Category	Technologies
Security & Network	VPC-SC, Cloud Armor, BeyondCorp, Private Service Connect, Cloud NAT
Identity & Encryption	Cloud IAM, Workload Identity Federation, Cloud KMS, Cloud HSM, mTLS
Monitoring & SIEM	Cloud Logging, Cloud Monitoring, Audit Logs, Chronicle SIEM, SCC Premium
Compliance	FedRAMP Moderate, NIST 800-53 Rev 5, FIPS 140-2, SSP/CIS/POA&M
IaC & Automation	Terraform, Config Connector, Org Policy Service, GitOps

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: RTX1e861f
Position Id: 2026-606
Posted 1 day ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

FedRAMP Cloud Security & Compliance Engineer

Dice Job Match Score™

Job Details

Skills

Summary

Similar Jobs