Senior GRC Engineer - GOV (FedRAMP 20x)

Workstreet

3d • Remote

About The Position

Workstreet is seeking a Sr. Engineer, GRC Engineering (Government) to serve as a high-touch, executive-level strategic partner for organizations navigating federal compliance frameworks. Built around client relationship excellence, this role centers on delivering an exceptional client experience, cultivating trusted advisor relationships, and maintaining account retention across high-stakes engagements. You will guide clients through complex federal certifications while directing a team of primary operators who manage day-to-day execution across CMMC, NIST SP 800-171, NIST SP 800-53, and FedRAMP 20x standards. The successful candidate will integrate rapidly into the organization, assuming active portfolio ownership within their first 15 days. Rather than focusing solely on routine task execution, you will lead end-to-end strategic engagements, handle escalations with composure, and represent clients on executive calls to ensure every partner remains deeply engaged, highly satisfied, and aligned with Workstreet long-term during U.S. Eastern Time business hours.

Requirements

• Federal compliance leader - possess 5+ years of direct experience implementing federal compliance, NIST SP 800-53, FedRAMP, or Risk Management Framework (RMF) standards.
• End-to-end engagement owner - bring 3+ years of experience leading multi-project client engagements, building long-term executive trust, and managing account retention.
• FedRAMP pathway authority - deeply familiar with FedRAMP 20x Program Certifications (Class A/B/C) and Rev5 Agency Certifications (Class D/High) to advise clients on strategy.
• Government cloud security architect - hands-on execution experience across major cloud platforms (AWS, Azure, GCP), specifically within AWS GovCloud or Azure Government regions.
• Compliance-as-code operator - working ability with scripting languages and policy-as-code tooling (Python, OPA/Rego, IaC) to build and inspect automated evidence pipelines.
• Audit-side assessment veteran - practical experience working with or for a 3PAO, participating on security assessment teams, or conducting formal evidence adjudication.
• Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.
• A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.
• Commitment to working a standard schedule of 8:00 AM–5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. Occasional flexibility to adjust working hours is expected to accommodate changing business priorities, global collaboration, and time-sensitive hiring needs.
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.
• Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.
• Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
• Applicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future. Workstreet does not provide employment-based visa sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized visa category.

Nice To Haves

• Active federal security credentials - hold recognized certifications such as CISSP, CISM, CGRC, or Certified Authorization Professional (CAP).
• Validated cloud architecture credentials - active technical certifications such as AWS Solutions Architect Associate, Azure Security Engineer, or GCP Associate Cloud Engineer.
• Collaborative continuous monitoring experience - documented history managing FedRAMP certification activities and real-time Continuous Monitoring (CCM) workflows.
• Hands-on OSCAL schema mastery - practical experience authoring or validating machine-readable SSPs, POA&Ms, or KSI evidence utilizing OSCAL, JSON, or YAML schemas.

Responsibilities

• Lead federal certification advisory motions - guide clients through FedRAMP 20x, Assessment & Authorization (A&A), and federal compliance lifecycles with clear milestone direction.
• Deliver executive-level compliance guidance - act as a trusted advisor, translating complex CR26 rules, 46 Key Security Indicators (KSIs), and federal standards into business language.
• Direct and develop compliance pods - mentor, coach, and manage a small team of compliance professionals, enforcing quality standards and delivery accountability across engagements.
• Build machine-readable compliance artifacts - author and maintain Security Decision Records, Security Configuration Guides, and OSCAL/JSON/YAML artifacts conforming to RFC-0024 and OMB M-24-15 mandates.
• Implement continuous monitoring tooling - connect CSPM and GRC platforms into agency pipelines under FedRAMP’s Collaborative Continuous Monitoring (CCM) model to replace point-in-time ConMon reporting.
• Execute federal gap and readiness reviews - conduct comprehensive gap assessments and control mapping across FedRAMP 20x Class A, Class B, and Class C requirements.
• Orchestrate third-party assessment activities - guide clients through 3PAO assessments, C3PAO audits, and independent assessor evaluations with speed and technical rigor.
• Track evolving federal regulatory updates - monitor Consolidated Rules (CR26), Significant Change Notifications (SCNs), and the Rev5-to-20x transition timeline to maintain client compliance.

Benefits

• Clear path with mentorship and training opportunities.
• Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
• A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
• Early-stage company with significant room for career advancement.
• Flexibility to work from anywhere while collaborating with a global team.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed