[Hiring] Engagement Architect - Cloud Architecture @Coalfire

Role Description

Coalfire builds and operates FedRAMP-compliant cloud environments for software companies entering the federal market. We’re looking for an Engagement Architect to serve as the technical owner of a client engagement—taking a signed contract and carrying it through architecture build, security control implementation, and a verified transition into managed operations.

• Own client engagements end-to-end: from contract signature through environment build, control implementation, automated evidence pipelines, and handoff to managed operations.
• Instantiate Coalfire’s reference architecture for the contracted certification level and cloud platform, adapting it to the client’s application and boundary.
• Lead implementation of security controls and the automation that continuously validates them—the evidence a modern FedRAMP certification runs on.
• Coordinate Coalfire’s engineering teams as they deploy their capabilities (identity, monitoring, change management, and more) into your engagement.
• Drive the build through defined quality gates, with a clean, measurable transition to operations—every in-scope control implemented, validated, and stable.
• Serve as the client’s primary technical counterpart: run technical working sessions, manage milestones and risks, and keep scope honest.
• Document architecture decisions and feed lessons from each build back into Coalfire’s standards.

Qualifications

• BS or above in a related Information Technology field or equivalent combination of education and experience.
• 8+ years in cloud engineering or architecture, including 3+ years leading technical delivery for external clients.
• Experience leading FedRAMP builds or authorizations—or equivalent depth in another regulated cloud regime (DoD impact levels, StateRAMP, PCI, HIPAA).
• Hands-on skill across infrastructure-as-code, identity and access management, logging and monitoring, and cloud networking on at least one major cloud platform (AWS, Azure, or GCP).
• Strong client-facing communication—able to explain an architecture decision to an engineer, a project sponsor, or an assessor.
• Sound judgment about scope, risk, and when to escalate.
• Excellent organizational and problem-solving skills.
• Effective documentation skills, including technical diagrams and written descriptions.
• Ability to work independently and as part of a team with a professional attitude and demeanor.
• Critical thinking, and the ability to balance security requirements with mission needs.

Requirements

• Professional-level certification in AWS, Azure, or GCP.

Bonus Points

• Familiarity with FedRAMP 20x, Key Security Indicators (KSIs), and machine-readable compliance artifacts (OSCAL or JSON).
• Experience with productized or fixed-price delivery models.
• Relevant certifications such as cloud platform professional/security certifications or CISSP.
• Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG.
• Familiarity with frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, or PCI.

Benefits

• Flexible work model that empowers you to choose when and where you’ll work most effectively.
• Opportunities to join employee resource groups, participate in in-person and virtual events.
• Competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.