Cloud Engineer – Governance, Risk, and Compliance (GRC)

🕒 September 17

🇺🇸 United States – Remote

💵 $112k - $179k / year

⏰ Full Time

🟠 Senior

🔴 Lead

☁️ Cloud Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Peraton

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Peraton is a mission-focused enterprise that supports national security initiatives through advanced IT and cyber services. They provide capabilities in areas such as cyber defense, cloud operations, engineering, and intelligence. With a commitment to solving complex challenges, Peraton integrates data-driven technologies to ensure mission success for their military and government clients.

📋 Description

• Own the full audit and assessment calendar, including continuous control assessments, financial and IT-financial audits, internal controls testing, and security compliance audits • Serve as the primary point of contact for external auditors and assessors • Lead audit lifecycle meetings and working sessions with clients, auditors, assessors, and stakeholders • Support penetration testing, red/purple/white team exercises, and CISA high-value-asset assessments • Coordinate new system authorization (ATO) and periodic reauthorization efforts • Maintain the System Security Plan, control implementation updates, system and technical descriptions, and inherited/tailored control reviews • Lead annual review and executive sign-off cycles for security documentation and control catalog accuracy • Own annual business continuity and resilience documentation review, updates, and testing • Lead privacy impact and threshold assessments with the privacy function • Produce compliance reporting, inventory reports, scorecards, SLA and audit-performance metrics, and progress reports • Design, build, and maintain automated evidence-collection and continuous-monitoring pipelines • Automate recurring audit, documentation, and reporting processes using cloud services, APIs, scripting, and IaC • Maintain governance documents for security and audit-support processes • Handle ad hoc security and privacy inquiries and impact-analysis requests • Lead coordination with system owners, risk management, and compliance stakeholders on audit status, findings, and remediation

🎯 Requirements

• Must be a U.S. Citizen • Ability to obtain and maintain the required Public Trust level clearance • Bachelor's Degree and 12 years of experience, Master's Degree and 10 years of experience, or High School diploma or equivalent and 16 years of experience • 10+ years of combined experience across cloud engineering and GRC/IT audit/information security compliance, with hands-on depth in both • Experience building or maintaining cloud infrastructure and automation in a production environment • Experience with Infrastructure as Code, scripting, and cloud-native tooling • Experience serving as the primary point of contact between technical teams and external auditors or assessors • Experience owning security documentation, such as an SSP, and control implementation • Experience managing findings and remediation from audits, penetration testing, or red/white team engagements through closure • Relevant certification: AWS Certified Solutions Architect, AWS Certified Security - Specialty, CISSP, CISA, CRISC, or CGRC • Hands-on experience with AWS, networking, databases, midrange software, OS, VDI, security, and administrative tool stacks • Ability to read, write, and modify Terraform or CloudFormation • Ability to build policy-as-code compliance checks • Ability to build automation using Python, Bash, or PowerShell • Experience with SIEM, firewalls, EDR, centralized logging, Wiz, or Prisma Cloud • Understanding of network architecture, segmentation, and access boundaries • Experience with AWS Config, Security Hub, CloudTrail, and Audit Manager • GRC/compliance automation tooling administration and configuration • Experience with NIST 800-53 and control frameworks including NIST CSF, A-123, FISMA, and SOC 1/2 Type 2 • Strong written and verbal communication • Program and stakeholder management experience

🏖️ Benefits

• Potential eligibility for overtime • Potential eligibility for shift differential • Potential eligibility for a discretionary bonus