[Hiring] Cloud Engineer @Peraton

Role Description

Peraton is seeking a Cloud Engineer specializing in Governance, Risk, and Compliance (GRC) to help modernize how it manages audit, risk, and compliance. This person will help move from manual evidence collection to a cloud-engineered, continuously monitored program. This senior role owns the transformation end-to-end:

• Audit and assessment calendar
• System Security Plan and control documentation
• Continuity and privacy deliverables
• Compliance reporting, all rebuilt on automated pipelines this role designs and builds directly.

Work Location: Remote

Shift Schedule: 8am – 5pm Eastern Standard Time (EST)

Responsibilities

• Audit & Assessment Leadership
  • Own the organization's full audit and assessment calendar, ongoing/continuous control assessments, financial and IT-financial audits, internal controls testing, and security compliance audits (e.g., SOC 1 Type II).
  • Serve as the primary point of contact for external auditors and assessors.
  • Lead recurring meetings and working sessions with the client, auditors, and assessors across the audit lifecycle.
  • Provide audit support across the full assessment portfolio, incorporating all findings into the risk register and remediation lifecycle.
  • Support new system authorization (ATO) and periodic reauthorization efforts.
• Security Documentation & Control Ownership
  • Own ongoing maintenance of the System Security Plan (SSP).
  • Lead the annual review and executive sign-off cycle for core security documentation.
• Continuity & Resilience Planning
  • Own the annual review, update, and test cycle for business continuity and resilience documentation.
• Privacy
  • Lead recurring privacy impact/threshold assessments in coordination with the privacy function.
• Metrics, Reporting & Automation
  • Own recurring compliance reporting deliverables.
  • Design, build, and maintain automated evidence-collection and continuous-monitoring pipelines.
  • Identify the highest-value recurring manual processes across audit, documentation, and reporting work.
• Governance & Stakeholder Coordination
  • Maintain governance documents that codify the organization's security and audit-support processes.
  • Serve as the point of contact for ad hoc security and privacy inquiries.
  • Lead recurring coordination meetings with system owners, risk management, and compliance stakeholders.

Qualifications

• Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance.
• Bachelors Degree and 12 years of experience, a Masters Degree and 10 years of experience, or a High School diploma or equivalent and 16 years of experience.
• 10+ years of combined experience across cloud engineering and GRC/IT audit/information security compliance.
• Demonstrated experience building or maintaining cloud infrastructure and automation in a production environment.
• Experience managing findings and remediation from audits, penetration testing, or red/white team engagements through to closure.
• A portfolio or concrete example of a manual compliance or reporting process the candidate personally automated is a strong plus.
• One or more relevant certifications: AWS Certified Solutions Architect, AWS Certified Security - Specialty, CISSP, CISA, CRISC, or CGRC.

Requirements

• Infrastructure depth with hands-on experience in cloud (AWS), networking, databases, and midrange software.
• Ability to read, write, and modify Infrastructure as Code (IaC) such as Terraform or CloudFormation.
• Build working automation for evidence collection, inventory reporting, and continuous monitoring.
• Experience with security tooling and automation.
• Understanding of network architecture, segmentation, and access boundaries.
• Experience administering and configuring GRC/compliance automation tooling.
• Familiarity with NIST 800-53 and control frameworks.
• Strong written and verbal communication skills.
• Program and stakeholder management experience.

Benefits

• Target Salary Range: $112,000 - $179,000.
• Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position.
• Employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Company Description

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. We deliver trusted, highly differentiated solutions and technologies to protect our nation and allies.