Principal Cloud Engineer

What You'll Do

· Own the technical integrity of Coalfire’s FedRAMP reference architectures and capabilities across AWS, Azure, and GCP, and across certification levels.

· Set the engineering standards delivery teams build against—architecture patterns, security baselines, automation frameworks, and evidence-collection approaches.

· Review and approve custom architecture decisions when client requirements fall outside the standard; promote recurring customizations into the reference architecture so the standard improves every quarter.

· Serve as a technical escalation point for delivery teams on architecture and security design questions to improve client outcomes.

· Keep reference architectures current with evolving FedRAMP requirements, including machine-readable compliance packaging (OSCAL or JSON) and continuous-monitoring mandates.

· Mentor engagement architects and senior engineers; raise the technical bar across the delivery organization.

· Partner with the sales organization on solution shape for the most strategic pursuits.

· Represent Coalfire’s technical point of view in the FedRAMP community—working groups, public comment, and industry forums.





WORK ENVIRONMENT/TRAVEL REQUIRED:

Travel: Approximately 10–15%

U.S. citizenship is required, as this position supports federal compliance programs.

What You'll Bring

· BS or above in a related Information Technology field or equivalent combination of education and experience

· 10+ years in cloud security engineering and architecture, including principal- or staff-level scope

· Hands-on FedRAMP authorization experience—building, operating, or assessing FedRAMP environments

· Demonstrated design-authority experience: owning standards, running architecture review, and documenting decisions in a form other engineers build from

· Deep expertise in infrastructure-as-code (Terraform or equivalent), CI/CD, policy-as-code, and compliance automation

· Architecture depth on at least two of the three major cloud platforms (AWS, Azure, GCP)

· Fluency in NIST 800-53 and the FedRAMP control framework, as well as CMMC and DoD compliance standards

· Excellent communication, organizational, and problem-solving skills

· Effective documentation skills, including technical diagrams and written descriptions

· Ability to work independently and as part of a team with a professional attitude and demeanor

· Critical thinking, and the ability to balance security requirements with mission needs

REQUIRED CERTIFICATIONS:

· Professional/Expert-level certification in at least one major cloud platform (AWS, Azure, or GCP)

Bonus Points

· Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable evidence (OSCAL, JSON)

· Experience designing productized or repeatable delivery models for professional services

· Published writing, conference talks, or open-source work in cloud security or compliance automation

· CISSP, CISM, or CISA certifications

· Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG