Security Engineer 4 - FedRAMP Compliance Architect

PagerDuty is seeking a Security Engineer 4 - FedRAMP Compliance Architect to join our diverse, customer-focused team! This Security Engineer 4 - FedRAMP Compliance Architect will design, implement, and maintain secure architectures that meet FedRAMP requirements in a multi-tenant cloud environment. This role combines deep technical expertise with FedRAMP compliance knowledge to create scalable, secure solutions. You'll be the glue between security compliance requirements and technical implementation, ensuring our cloud infrastructure meets federal security standards while enabling business objectives.

Key Responsibilities:

• Design, implement, and maintain system architectures to align with FedRAMP requirements.
• Serve as the subject matter expert (SME) on FedRAMP, advising internal teams on security best practices, control implementations, and risk mitigation strategies.
• Collaborate with engineering, operations, product, and corporate IT teams to develop secure cloud-based architectures that meet federal compliance mandates.
• Implement governance strategy on technical security controls, including access management, configuration, encryption, logging, monitoring, and vulnerability management.
• Support annual assessments, security control reviews, and audits, coordinating with third-party assessors (3PAO) and government sponsors.
• Technical support for external stakeholders on customer responsibilities. 
• Key contributor to the development and maintenance of the System Security Plan (SSP), Policies and Procedures, Configuration Management Plan, Secure System Development Life Cycle, and other FedRAMP documentation
• Partner with the GRC (Governance, Risk, and Compliance) team to efficiently track and resolve security findings.

Basic Qualifications:

• 5+ years of experience in cloud security architecture, compliance, or cybersecurity engineering, with at least 3 years of experience supporting FedRAMP Moderate or High authorization.
• Deep expertise in FedRAMP, NIST 800-53, FISMA, and cloud security best practices.
• Strong ability to assess security risks and recommend technical and procedural mitigations.
• Experience working with AWS GovCloud, Azure Government, or other federal cloud environments.
• Experience with audit preparation, risk assessments, and working with third-party assessors (3PAOs).
• Exceptional written and verbal communication skills for creating and managing FedRAMP documentation.

Preferred Qualifications:

• Experience supporting DoD IL 4 or 5 environments. 
• Experience with data governance frameworks, secure data storage, and data lifecycle management in multi-tenant cloud environments.
• Understanding of NIST AI Risk Management Framework (AI RMF) and its implications for secure AI adoption in government environments.
• Familiar with SaaS security tools (such as Sumo Logic, Datadog, Crowdstrike, Wiz, Lucidchart, Snyk, and Qualys). 
• Familiarity with Cloud Native and SaaS constructs, including architectures, DevOps, CI/CD, and SecOps disciplines.
• Relevant certifications, such as:
• Certified Information Systems Security Professional (CISSP)
• AWS Security Specialty, or equivalent
• CompTIA Advanced Security Practitioner (CASP+)
• Certificate of Cloud Security Knowledge (CCSK)]]

The successful applicant will be performing work in FedRAMP environments, and therefore, must be a U.S. Person (i.e. U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee). This position may also perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil.

The base salary range for this position is 176,000 - 281,000 USD. This role may also be eligible for bonus, commission, equity, and/or benefits.

Our base salary ranges are determined by role, level, and location. The range, which is subject to change based on primary work location, reflects the minimum and maximum base salary we expect to pay newly hired employees for the position. Within the range, we determine pay for an individual based on a number of factors including market location, job-related knowledge, skills/competencies and experience.

Your recruiter can share more about the specific offerings for this role, as well as the salary range for your primary work location during the hiring process.