Compliance Engineer
Core
Design, implement, and test security controls across compliance frameworks (FedRAMP, SOC 2, ISO 27001, NIST) to translate regulatory requirements into effective technical solutions.
Role type
Senior Compliance Engineer (Security & Automation)
Builds
Scalable, automated compliance workflows and machine-readable control definitions (JSON) for continuous monitoring.
Domain
Cloud Security & Regulatory Compliance
Required skills
Security compliance frameworks (FedRAMP, SOC 2, ISO 27001, NIST), Cloud security (AWS, IAM, vulnerability management), JSON/REST API development, Automation scripting (Python), Control testing & gap analysis, Engineering collaboration
Preferred skills
OSCAL, JSON Schema, Compliance automation platforms, Git workflows
Technologies
AWS, Python, JSON, REST APIs, Git, OSCAL
Responsibilities
Develop and verify technical security controls satisfying multiple compliance frameworks; Design and execute control testing procedures to assess performance and surface gaps; Build and maintain API integrations and automated workflows for evidence collection; Translate security requirements into structured, machine-readable JSON definitions; Establish repeatable control assessments and continuous monitoring processes; Identify opportunities to reduce manual effort and scale compliance operations.
Seniority
Senior, hands-on IC
