Senior GRC Engineer - GOV (FedRAMP 20x)

About the Role

Workstreet is seeking a Sr. Engineer, GRC Engineering (Government) to serve as a high-touch, executive-level strategic partner for organizations navigating federal compliance frameworks. This role focuses on delivering an exceptional client experience, cultivating trusted advisor relationships, and maintaining account retention across high-stakes engagements.

Responsibilities

• Lead federal certification advisory motions, guiding clients through FedRAMP 20x, Assessment & Authorization (A&A), and federal compliance lifecycles.
• Deliver executive-level compliance guidance, translating complex CR26 rules, 46 Key Security Indicators (KSIs), and federal standards into business language.
• Direct and develop compliance pods, mentoring and coaching a small team of compliance professionals while enforcing quality standards and delivery accountability.
• Build machine-readable compliance artifacts, including Security Decision Records, Security Configuration Guides, and OSCAL/JSON/YAML artifacts conforming to RFC-0024 and OMB M-24-15 mandates.
• Implement continuous monitoring tooling, connecting CSPM and GRC platforms into agency pipelines under FedRAMP’s Collaborative Continuous Monitoring (CCM) model.
• Execute federal gap and readiness reviews, conducting comprehensive gap assessments and control mapping across FedRAMP 20x Class A, Class B, and Class C requirements.
• Orchestrate third-party assessment activities, guiding clients through 3PAO assessments, C3PAO audits, and independent assessor evaluations.
• Track evolving federal regulatory updates, monitoring Consolidated Rules (CR26), Significant Change Notifications (SCNs), and the Rev5-to-20x transition timeline.

Requirements

• 5+ years of direct experience implementing federal compliance, NIST SP 800-53, FedRAMP, or Risk Management Framework (RMF) standards.
• 3+ years of experience leading multi-project client engagements, building long-term executive trust, and managing account retention.
• Deep familiarity with FedRAMP 20x Program Certifications (Class A/B/C) and Rev5 Agency Certifications (Class D/High).
• Hands-on execution experience across major cloud platforms (AWS, Azure, GCP), specifically within AWS GovCloud or Azure Government regions.
• Working ability with scripting languages and policy-as-code tooling (Python, OPA/Rego, IaC) to build and inspect automated evidence pipelines.
• Practical experience working with or for a 3PAO, participating on security assessment teams, or conducting formal evidence adjudication.

Qualifications

• Active federal security credentials such as CISSP, CISM, CGRC, or Certified Authorization Professional (CAP).
• Active technical certifications such as AWS Solutions Architect Associate, Azure Security Engineer, or GCP Associate Cloud Engineer.
• Documented history managing FedRAMP certification activities and real-time Continuous Monitoring (CCM) workflows.
• Practical experience authoring or validating machine-readable SSPs, POA&Ms, or KSI evidence utilizing OSCAL, JSON, or YAML schemas.

About the Team

Our GRC engineering team guides defense contractors and federal organizations through their CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, and Assessment & Authorization compliance efforts. We act as our clients' trusted guides and primary point of contact end-to-end, leading them through gap assessments, System Security Plans, POA&Ms, and C3PAO/3PAO coordination with clarity, composure, and a genuinely client-first mindset.

What We Offer

• Career Development: Clear path with mentorship and training opportunities.
• Role-Related Training: Reimbursement for successful completion of approved training and certification courses.
• Competitive Compensation: Competitive base salary with regular performance reviews and bonus opportunities.
• Growth Opportunity: Early-stage company with significant room for career advancement.
• Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

What You'll Need To Thrive

• Excellent written and verbal English communication skills.
• Reliable, high-speed internet connection and professional home office environment.
• Commitment to working 8:00 AM–5:00 PM US Eastern Time (ET) with occasional flexibility.
• Willingness to travel locally for occasional onsite meetings or business activities.

Applicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future.