Senior Compliance Engineering Architect (FedRAMP 20x)

UBERETHER INC•Sterling, VA

20d•$170,000 - $210,000•Hybrid

About The Position

UberEther is a leader in the hyper-secure infrastructure space for Identity and Access Management (IAM), #ZeroTrust and compliance acceleration. Our platform and expert services team enable government and commercial customers to have ultimate control over access to critical information. We are employee first, with outstanding benefits and a track record of upskilling and fostering growth. We're looking for employees who get excited about pioneering novel solutions to new, complex challenges. This role sits within UberEther's Compliance Business Unit, supporting a FedRAMP 20x advisory project built on Google Cloud Platform (GCP). As Senior Compliance Architect, you will serve as the technical bridge between FedRAMP 20x compliance requirements and platform engineering, translating Key Security Indicators (KSIs) into a concrete, defensible GCP-native platform architecture — ensuring the environment meets assessor expectations and holds up under continuous monitoring.

Requirements

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or related technical field; Master's degree preferred
10+ years of experience in cloud architecture, security engineering, or compliance-focused technical roles
5+ years of experience architecting solutions on Google Cloud Platform (GCP) in a security- or compliance-sensitive environment
Proven track record of translating FedRAMP, DoD, or other federal compliance frameworks into technical architecture
Deep experience with federal compliance frameworks, including NIST 800-53, FedRAMP 20x, Risk Management Framework (RMF), and continuous monitoring requirements
Expert-level knowledge of Google Cloud Platform (GCP) services, security controls, and compliance capabilities, with relevant certifications (Professional Cloud Architect or Professional Cloud Security Engineer preferred)
Strong understanding of FedRAMP 20x Key Security Indicators (KSIs) and how they map to concrete platform controls
Deep expertise in Infrastructure as Code tools (Terraform, Deployment Manager) and GitOps workflows
Strong understanding of containerization technologies (Docker, Kubernetes/GKE) in secure, compliance-focused environments
Comprehensive knowledge of Identity and Access Management solutions and Zero Trust architecture principles
Experience with compliance automation and evidence-generation tooling, including OSCAL and Policy as Code frameworks
Expert understanding of FedRAMP 20x requirements, KSI families, and continuous compliance obligations
Deep knowledge of NIST 800-53 security controls and their technical implementation on Google Cloud Platform
Strong familiarity with FedRAMP authorization processes and Assessment & Authorization (A&A) activities
Experience with FISMA, FIPS 140-2, and related federal security requirements
Proven ability to translate compliance requirements directly into technical architectures and control implementations
Exceptional communication skills with ability to explain complex KSI and compliance concepts to engineers, assessors, and executives
Proven ability to lead without direct authority, influencing technical direction across UberEther and customer engineering teams
Strong customer-facing skills with experience presenting technical architectures to federal customers and compliance assessors
Demonstrated project management skills with ability to manage a KSI mapping effort across multiple workstreams
Track record of building consensus and driving technical decisions in fast-paced, dynamic environments

Nice To Haves

Professional certifications: CISSP, CISA, CISM, Google Professional Cloud Architect/Security Engineer, or TOGAF
Prior experience supporting a FedRAMP 20x pilot engagement
Background in software or platform architecture on Google Cloud Platform specifically
Published thought leadership in cloud security, compliance automation, or FedRAMP 20x
Experience with compliance automation frameworks such as OSCAL, InSpec, or similar Policy as Code tools

Responsibilities

Serve as the principal technical authority translating FedRAMP 20x KSI requirements into platform architecture decisions for the engagement
Define and maintain the technical roadmap for mapping all KSIs across the FedRAMP KSI families to concrete GCP services, configurations, and evidence sources for the Advantage compliance model
Lead architecture reviews and design sessions with engineering leadership to ensure GCP deployments satisfy FedRAMP 20x assessment requirements
Drive technical decision-making on control inheritance, continuous monitoring strategy, and KSI verification approach for a GCP-hosted identity platform
Partner with the Compliance BU leadership team to translate FedRAMP 20x milestones into technical initiatives and delivery rocks
Establish architectural standards and design patterns for KSI-mapped platform components that can be reused across future GCP engagements
Own the end-to-end technical architecture that maps all FedRAMP 20x KSIs onto concrete Advantage GCP service configurations, IAM policies, and network controls
Lead the design of Infrastructure as Code templates (Terraform, Deployment Manager) that encode KSI requirements directly into GCP deployments
Drive automation initiatives that generate continuous compliance evidence directly from GCP-native logging, monitoring, and security services
Provide architectural guidance on GCP IAM, VPC Service Controls, Cloud KMS, and Security Command Center as they relate to KSI satisfaction
Collaborate with the Engineering team to align GCP-specific automation with UberEther's existing GitLab and Terraform tooling
Champion a KSI-first design approach so security and compliance controls are architected in from day one, not retrofitted
Serve as the escalation point for complex FedRAMP 20x KSI questions from the engineering and Customer Success teams
Lead technical architecture workshops with stakeholders to walk through KSI-to-control mappings and remediation paths
Provide expert guidance on translating KSI evidence requirements into System Security Plan (SSP) and machine readable/OSCAL-based technical documentation
Support pre-sales and advisory activities by explaining FedRAMP 20x architecture decisions during customer briefings
Translate platform requirements into technical designs that align with Advantage delivery model
Drive continuous improvement of the KSI mapping based on assessor feedback, CR26 verification results, and evolving FedRAMP 20x guidance
Work closely with the DevOps and Support functions to ensure GCP monitoring, dashboards, and alerting align with KSI evidence requirements
Lead the technical design of automated KSI verification, including how each of the KSI families is evidenced on an ongoing basis
Provide architectural guidance for remediation runbooks and system hardening standards specific to GCP-hosted workloads
Support 3PAO assessments and FedRAMP 20x reviews by explaining the platform architecture and how it satisfies each KSI
Drive adoption of Policy as Code and OSCAL-based evidence generation across the platform
Ensure proper integration between GCP-native security tooling and UberEther's compliance automation approach
Foster technical collaboration between UberEther's Compliance BU and engineering team through regular architecture syncs
Mentor engineers on GCP architecture, FedRAMP 20x KSI requirements, and secure design principles
Lead retrospectives focused on improving the KSI-to-architecture mapping process for future GCP engagements
Participate in Level 10 (L10) meetings, providing technical insight on progress and cross-team dependencies
Develop training content to help engineers understand FedRAMP 20x KSI requirements and their architectural implications
Serve as a technical ambassador for UberEther's FedRAMP 20x advisory capabilities with future GCP customers