Senior Security Compliance Engineer, AWS (FedRAMP High / DoD IL5)
New
K
Keeper SecurityCybersecurity Software
El Dorado Hills, CA or Chicago, IL metro areaFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 7+ years of experience in cloud security or security compliance engineering; 5+ years of direct, hands-on experience supporting FedRAMP High environments; 5+ years of hands-on experience securing AWS environments; 5+ years of experience working directly with 3PAOs, auditors, and government stakeholders
- Required Skills
- AWS
Requirements
- Bachelor’s degree in Information Security, Computer Science, Engineering, or equivalent practical experience
- 7+ years of experience in cloud security or security compliance engineering
- 5+ years of direct, hands-on experience supporting FedRAMP High environments
- Strong working knowledge of NIST 800-53 controls, DoD SRG requirements, and continuous monitoring processes
- 5+ years of hands-on experience securing AWS environments, including IAM, logging and monitoring, encryption, and vulnerability management
- 5+ years of experience working directly with 3PAOs, auditors, and government stakeholders
- Demonstrated ability to translate regulatory requirements into practical, enforceable technical controls
- Direct experience operating in DoD IL5 environments (Preferred)
- AWS Security Specialty or AWS Solutions Architect certification (Preferred)
- CISSP, SANS, or equivalent security certification (Preferred)
- Experience supporting SOC 2, PCI DSS, or ISO 27001 in cloud-native environments (Preferred)
Responsibilities
- Serve as the technical lead for FedRAMP High and DoD IL5 compliance, including continuous monitoring, control validation, and authorization activities
- Implement, operate, and validate AWS security controls aligned with NIST 800-53 High baseline and DoD SRG requirements
- Partner with cloud and platform engineering teams to review architectures, challenge non-compliant designs, and guide secure implementation
- Author, manage, and track POA&Ms, including root cause analysis, remediation planning, and reporting to 3PAOs, sponsoring agencies, and DoD stakeholders
- Coordinate vulnerability remediation and patching across AWS infrastructure and supporting services
- Lead audit readiness and evidence collection efforts, including improving automation for recurring FedRAMP and IL5 deliverables
- Provide secondary technical support for SOC 2, PCI DSS, and ISO 27001 compliance initiative
View Full Description & ApplyYou'll be redirected to the employer's site
