GRC Engineer (CMMC/FedRAMP)
About The Position
We are seeking a GRC Engineer who is highly motivated, detail-oriented, and has foundational knowledge of FedRAMP Moderate and High baseline requirements, with complementary experience supporting CMMC and NIST SP 800-171-based programs. The ideal candidate brings strong client-facing communication skills and the ability to contribute to multiple compliance initiatives simultaneously. This role is focused on guiding clients through federal compliance frameworks, supporting both SaaS providers and federal contractors through the FedRAMP authorization lifecycle—including readiness assessment, authorization support, and continuous monitoring—as well as advising defense contractors on CMMC Level 1 and Level 2 compliance and related NIST 800-171 requirements. The successful candidate will play a critical role in helping clients achieve and sustain federal and DoD compliance while leading high-quality delivery across all engagements.
Requirements
- Strong organizational and project management skills with the ability to manage multiple engagements concurrently
- 2+ years of experience in GRC, with exposure to FedRAMP, NIST SP 800-53, and federal compliance programs
- Working knowledge of CMMC 2.0 and NIST SP 800-171 requirements
- Experience authoring and reviewing SSPs, POA&Ms, and assessment artifacts
- Familiarity with federal cloud environments (AWS GovCloud, Azure Government, GCC High)
- Experience working with SaaS providers, federal contractors, or regulated technology organizations
- Ability to thrive in a fast-paced, consulting, or startup environment
Nice To Haves
- FedRAMP-specific experience supporting JAB or Agency ATOs
- CMMC Registered Practitioner (RP), CCP, or CCA certification
- CISSP, CISM, or Security+ certification
- Experience with DFARS clauses and CUI handling requirements
- Familiarity with SPRS reporting and DoD assessment workflows
- Prior experience working directly with 3PAOs or C3PAOs
Responsibilities
- Interpret and Apply FedRAMP Requirements
- Develop and Maintain FedRAMP Documentation
- Conduct FedRAMP Readiness Assessments
- Support Authorization and Assessment Activities
- Boundary Definition & Scoping
- Support Continuous Monitoring Programs
- Support FedRAMP Engagements
- Support CMMC and NIST 800-171 Compliance Efforts
- Develop CMMC Documentation
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
