Compliance Engineer - Public Sector

About the role

The Public Sector Compliance Operations Team aims to accelerate Wiz’s growth by developing a comprehensive strategy, in tight partnership with all other organizations, to drive customer value and adoption. As we continue to grow at an incredible speed, we work to ensure each sales team member is set up for success at every phase. We take both a bird’s eye view and dive into the weeds to solve problems as a team to drive employee success and revenue.

Responsibilities

• Lead the technical roadmap for FedRAMP Continuous Monitoring, moving from manual reporting to an automated, real-time telemetry model.
• Arcitect compliance outcomes by translating NIST 800-53 Rev. 5 and FedRAMP CR26 rulesets into scalable engineering and product solutions.
• Engineer evidence generation frameworks, significantly reducing manual effort required for 3PAO assessments and automating compliance validation for control implementation verification.
• Conduct technical risk assessments, root-cause analysis on compliance findings, and provide guidance for implementation of compensating controls or hardening measures in cloud environments.
• Own the technical compliance documentation lifecycle, including Security Decision Records (SDRs).
• Collaborate cross-functionally with legal, product, engineering, devops, architecture, security, and federal customer teams to scope technical compliance verification and validation requirements for new features and services.
• Mentor others on FedRAMP/DoW compliance best practices and contribute to internal training programs.

Requirements

• 6+ years of experience in security engineering, DevOps, and systems engineering, with a proven ability developing processes and writing code to solve security/compliance problems.
• 4+ years of expertise in NIST SP 800-53, FedRAMP High baselines, and DoW SRG overlays, with a proven ability to assess risk, reduce risk, and build engineering solutions that enable compliance.
• Deep understanding of the differences between FR 20x and CR26 ruleset for Rev5 authorizations and the impacts these rule changes have on Cloud Service Providers (CSPs).
• Experience working in a cloud-native environment with DevSecOps technologies, specifically including CI/CD, Containers, and Kubernetes.
• Strong proficiency in scripting and Infrastructure as Code (IaC), with specific requirements for Shell Scripting, Python, Terraform or OpenTofu, and Preferred AI Harness (Claude Code, OpenAI Codex).
• Experience with cloud platforms in government spaces.
• Preferred qualifications: Experience with AWS GovCloud, Azure Government, Google Cloud for Government (Assured Workloads), or equivalent and associated security services. Experience with DevSecOps technologies including Microservices, GitOps, and Observability / Logging / SIEM / Platforms. Experience with Packer, other Configuration as Code tools, and Policy as Code tools. Experience automating compliance validation using cloud-native tools.

Qualifications

• Experience with cloud platforms in government spaces.
• Preferred qualifications: Experience with AWS GovCloud, Azure Government, Google Cloud for Government (Assured Workloads), or equivalent and associated security services. Experience with DevSecOps technologies including Microservices, GitOps, and Observability / Logging / SIEM / Platforms. Experience with Packer, other Configuration as Code tools, and Policy as Code tools. Experience automating compliance validation using cloud-native tools.

Skills

• Experience with cloud platforms in government spaces.
• Preferred qualifications: Experience with AWS GovCloud, Azure Government, Google Cloud for Government (Assured Workloads), or equivalent and associated security services. Experience with DevSecOps technologies including Microservices, GitOps, and Observability / Logging / SIEM / Platforms. Experience with Packer, other Configuration as Code tools, and Policy as Code tools. Experience automating compliance validation using cloud-native tools.

Benefits

Compensation for this full-time position includes base salary + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Pay

The US base salary range for this full-time position is listed below.
US Base Pay Range: $174,000—$238,000 USD

Schedule

Full-time position.

Equal Opportunity Employer

We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.