Engagement Architect - Cloud Architecture (FedRAMP)
Remote United States Full-time Mid-level Other
At a glance
Mid-level role at Coalfire. Remote, United States · full-time · $89,000–$149,000 base.
SalaryStated by Coalfire
$89,000 – $149,000
Base salary for this role, in USD per year, as published in the posting.
RoleOther
SeniorityMid-level
LocationUnited States
WorkplaceRemote
EmploymentFull-time
Base pay$89,000–$149,000
PostedJul 22, 2026 · 3mo ago
Role brief
remoteroles summary, based on the employer's posting.
What you'll do
- Take client projects from signed agreement through cloud setup, security controls, automated evidence collection, and operations handoff
- Tailor the reference design to each client’s certification level, cloud provider, application, and system boundary
- Guide control implementation and ongoing automated checks that produce evidence for FedRAMP certification
- Coordinate engineering deployments for identity, monitoring, and change management, and track delivery through quality checks
- Lead client technical sessions, manage milestones and risks, document design choices, and improve standards with build lessons
What you bring
- At least eight years in cloud engineering or architecture, including three years directing technical work for external clients
- A related IT degree or equivalent education and experience, plus a professional AWS, Azure, or GCP certification
- FedRAMP implementation or authorization leadership, or comparable experience in another regulated cloud framework
- Practical capability with infrastructure-as-code, identity and access management, logging, monitoring, and cloud networking on a major platform
Who this fits
This role suits a mid-career cloud architect who can lead client delivery and explain technical decisions to engineers, sponsors, and assessors. It is remote in the United States and involves travel of ten to twenty-five percent, depending on client needs. U.S. citizenship is desired because the work supports federal compliance programs.
From the employer
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
What You'll Do
- Own client engagements end-to-end: from contract signature through environment build, control implementation, automated evidence pipelines, and handoff to managed operations.
- Instantiate Coalfire’s reference architecture for the contracted certification level and cloud platform, adapting it to the client’s application and boundary.
- Lead implementation of security controls and the automation that continuously validates them—the evidence a modern FedRAMP certification runs on.
- Coordinate Coalfire’s engineering teams as they deploy their capabilities (identity, monitoring, change management, and more) into your engagement.
- Drive the build through defined quality gates, with a clean, measurable transition to operations—every in-scope control implemented, validated, and stable.
- Serve as the client’s primary technical counterpart: run technical working sessions, manage milestones and risks, and keep scope honest.
- Document architecture decisions and feed lessons from each build back into Coalfire’s standards.
- Ability to travel 10–25%, driven by client needs
- U.S. citizenship is desired, as this position supports U.S. federal compliance programs.
What You'll Bring
- BS or above in a related Information Technology field or equivalent combination of education and experience
- 8+ years in cloud engineering or architecture, including 3+ years leading technical delivery for external clients
- Experience leading FedRAMP builds or authorizations—or equivalent depth in another regulated cloud regime (DoD impact levels, StateRAMP, PCI, HIPAA)
- Hands-on skill across infrastructure-as-code, identity and access management, logging and monitoring, and cloud networking on at least one major cloud platform (AWS, Azure, or GCP)
- Strong client-facing communication—able to explain an architecture decision to an engineer, a project sponsor, or an assessor
- Sound judgment about scope, risk, and when to escalate
- Excellent organizational and problem-solving skills
- Effective documentation skills, including technical diagrams and written description
- Ability to work independently and as part of a team with a professional attitude and demeanor
- Critical thinking, and the ability to balance security requirements with mission needs
- Professional-level certification in AWS, Azure, or GCP
Bonus Points:
- Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable compliance artifacts (OSCAL or JSON)
- Experience with productized or fixed-price delivery models
- Relevant certifications such as cloud platform professional/security certifications or CISSP
- Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG
- Familiarity with frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, or PCI