Compliance Engineer, Cloud Zero Trust

Cratis Automation Solutions | Remote (US), occasional travel | Full time
Active Top Secret clearance and US citizenship required.

Cratis supports a Department of Defense cloud Zero Trust (ZT) program. The Compliance Engineer owns the evidence package: control narratives, inheritance documentation, POA&Ms and the final authorization package, and builds the automated evidence pipeline for continuous authorization.

Responsibilities

• Author control narratives and evidence artifacts for each Target-level ZT activity, per accreditation boundary.
• Produce inheritance documentation and secure enterprise sign-off.
• Write and maintain POA&Ms to a single standard.
• Define the evidence standard and definition of done; review engineer evidence against it.
• Build continuous authorization evidence with AWS Config, Security Hub and Audit Manager.
• Assemble quarterly readouts and the final package; coordinate eMASS artifacts with ISSMs.

Qualifications

• 5 or more years in DoD compliance, assessment and authorization, or RMF engineering.
• Strong knowledge of NIST SP 800-53 Rev. 5, NIST SP 800-37, the DoD Cloud Computing SRG and eMASS.
• Experience writing control narratives and POA&Ms that have passed assessment.
• Hands-on AWS experience, GovCloud preferred.
• CompTIA Security+ CE at start.
• Active Top Secret clearance.

Pay: $115,000.00 - $140,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Vision insurance

Work Location: Remote