Note: The job is a remote job and is open to candidates in USA. Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. The Principal Cloud Engineer will own the technical integrity of FedRAMP reference architectures and capabilities across multiple cloud platforms while mentoring engineers and setting engineering standards.

Responsibilities

• Own the technical integrity of Coalfire’s FedRAMP reference architectures and capabilities across AWS, Azure, and GCP, and across certification levels
• Set the engineering standards delivery teams build against—architecture patterns, security baselines, automation frameworks, and evidence-collection approaches
• Review and approve custom architecture decisions when client requirements fall outside the standard; promote recurring customizations into the reference architecture so the standard improves every quarter
• Serve as a technical escalation point for delivery teams on architecture and security design questions to improve client outcomes
• Keep reference architectures current with evolving FedRAMP requirements, including machine-readable compliance packaging (OSCAL or JSON) and continuous-monitoring mandates
• Mentor engagement architects and senior engineers; raise the technical bar across the delivery organization
• Partner with the sales organization on solution shape for the most strategic pursuits
• Represent Coalfire’s technical point of view in the FedRAMP community—working groups, public comment, and industry forums

Skills

• BS or above in a related Information Technology field or equivalent combination of education and experience
• 10+ years in cloud security engineering and architecture, including principal- or staff-level scope
• Hands-on FedRAMP authorization experience—building, operating, or assessing FedRAMP environments
• Demonstrated design-authority experience: owning standards, running architecture review, and documenting decisions in a form other engineers build from
• Deep expertise in infrastructure-as-code (Terraform or equivalent), CI/CD, policy-as-code, and compliance automation
• Architecture depth on at least two of the three major cloud platforms (AWS, Azure, GCP)
• Fluency in NIST 800-53 and the FedRAMP control framework, as well as CMMC and DoD compliance standards
• Excellent communication, organizational, and problem-solving skills
• Effective documentation skills, including technical diagrams and written descriptions
• Ability to work independently and as part of a team with a professional attitude and demeanor
• Critical thinking, and the ability to balance security requirements with mission needs
• Professional/Expert-level certification in at least one major cloud platform (AWS, Azure, or GCP)
• Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable evidence (OSCAL, JSON)
• Experience designing productized or repeatable delivery models for professional services
• Published writing, conference talks, or open-source work in cloud security or compliance automation
• CISSP, CISM, or CISA certifications
• Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG

Benefits

• Provide a flexible work model that empowers you to choose when and where you’ll work most effectively - whether you’re at home or an office.
• Paid parental leave
• Flexible time off
• Certification and training reimbursement
• Digital mental health and wellbeing support membership
• Comprehensive insurance options

Company Overview