{"id":2480983,"url":"https://alion.io/job/work-street-grc-engineer-gov-fedramp-20x","title":"GRC Engineer - GOV (FedRAMP 20x)","company":{"id":686337,"name":"Work Street","domain":"workstreet.com","url":"https://alion.io/company/workstreet","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"B","score":82,"open_postings":7,"ghost_share":0,"stale_share":0.714,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"ET","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":124000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":175},"experience_years_min":2,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-13T19:43:13Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-21T06:16:53Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"About Workstreet\nAt Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.\nGet to know the GRC Engineering (GOV) Team\nOur GRC engineering team guides defense contractors and federal organizations through their CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, and Assessment & Authorization compliance efforts. We act as our clients' trusted guides and primary point of contact end-to-end, leading them through gap assessments, System Security Plans, POA&Ms, and C3PAO/3PAO coordination with clarity, composure, and a genuinely client-first mindset. Beyond the technical depth in RMF, CUI/DFARS requirements, and GovCloud environments, what defines us is how we work: we translate complex requirements into plain language, manage escalations with urgency and care, and take real pride in making every client feel informed, supported, and well-prepared. We're a group that mentors one another, holds a high bar for quality, and thrives in a fast-paced environment where our work directly strengthens the security of the defense industrial base.\nThe Opportunity\nWorkstreet is seeking a GRC Engineer (FedRAMP 20x) who is highly motivated, detail-oriented, and possesses foundational knowledge of FedRAMP 20x, CR26 rules, and Key Security Indicators (KSIs). Operating as a key technical contributor within our government delivery practice, this role focuses on hands-on technical execution, building automated evidence pipelines, authoring machine-readable artifacts, and supporting organizations through the FedRAMP 20x certification lifecycle.\nThe successful candidate will combine strong technical execution skills with the organizational discipline to manage multiple compliance tasks concurrently under senior guidance. In this role, you will partner directly with client engineering and compliance leads, assist with 3PAO assessment preparation, and help implement continuous monitoring pipelines to ensure clients achieve and sustain compliance during U.S. Eastern Time business hours.\nWhat You'll Do\nExecute FedRAMP 20x control validation - analyze and apply FedRAMP Consolidated Rules (CR26) and the 46 Key Security Indicators (KSIs) across 10 families to ensure software architectures align with federal standards.\nAuthor machine-readable certification artifacts - create, update, and maintain Security Decision Records, Security Configuration Guides, and OSCAL/JSON/YAML documentation conforming to RFC-0024 and OMB M-24-15 mandates.\nImplement automated evidence pipelines - design and maintain automated evidence-gathering workflows to continuously validate KSIs, moving away from manual point-in-time audit procedures.\nConduct readiness and gap assessments - perform technical readiness reviews and control mapping across FedRAMP 20x Class A, Class B, and Class C baseline requirements.\nSupport Collaborative Continuous Monitoring (CCM) - assist in connecting CSPM and GRC tooling into agency pipelines to feed real-time KSI validation data.\nFacilitate external 3PAO assessments - coordinate evidence submission and operational logistics during Third-Party Assessment Organization (3PAO) audits and independent assessments under senior guidance.\nAssist in security control remediation - collaborate with internal and client technical teams to remediate security gaps and control deficiencies across multi-cloud environments.\nTrack evolving federal regulatory updates - monitor CR26 updates, Significant Change Notifications (SCNs), and the Rev5-to-20x transition timeline to keep client programs aligned.\nWho You Are\nFederal compliance practitioner - bring 2+ years of direct technical experience executing GRC deliverables across NIST SP 800-53, FedRAMP, or federal authorization lifecycles.\nFedRAMP 20x framework familiarity - foundational understanding of FedRAMP 20x Program Certifications (Class A/B/C), CR26 rules, and KSI-based validation models.\nMachine-readable artifact author - hands-on experience creating or working with technical compliance artifacts utilizing OSCAL, JSON, or YAML schemas.\nSovereign cloud environment navigator - practical exposure to major cloud platforms (AWS, Azure, GCP) and secure government environments like AWS GovCloud or Azure Government.\nCompliance-as-code contributor - working ability with scripting languages or policy-as-code tools (Python, Rego/OPA, Terraform) to help build and inspect automated evidence pipelines.\nDisciplined project operator - highly organized practitioner with the ability to coordinate multiple federal compliance tasks concurrently without losing detail.\nEffective client communicator - possesses strong written and verbal English communication skills suited for direct collaboration with client technical teams and assessors.\nWhat will help you succeed\nActive security credentials - hold recognized certifications such as CompTIA Security+, CGRC, CAP, or Associate of CISSP.\nCloud infrastructure certifications - technical certifications such as AWS Solutions Architect Associate, Azure Security Engineer Associate, or GCP Associate Cloud Engineer.\nDirect 3PAO assessment exposure - practical history participating in 3PAO audits or supporting live agency Authority to Operate (ATO) evaluations.\nCollaborative continuous monitoring experience - background supporting FedRAMP ConMon or real-time Collaborative Continuous Monitoring (CCM) workflows.\nComplementary defense framework knowledge - baseline familiarity with CMMC 2.0 or NIST SP 800-171 requirements for defense supply chain contractors.\nWhat We Offer\nCareer Development: Clear path with mentorship and training opportunities.\nRole-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.\nCompetitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.\nGrowth Opportunity: Early-stage company with significant room for career advancement.\nRemote-First Culture: Flexibility to work from anywhere while collaborating with a global team.\nWhat You'll Need to Thrive\nExcellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.\nA reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.\nCommitment to working a standard schedule of 8:00 AM-5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. Occasional flexibility to adjust working hours is expected to accommodate changing business priorities, global collaboration, and time-sensitive hiring needs.\nWillingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.\nHiring and Selection Process\nCandidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.\nEmployment is contingent upon successful completion of identity verification and background screening, where permitted by law.\nSelected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.\nCandidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.\nApplicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future. Workstreet does not provide employment-based visa sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized visa category.\nWorkstreet Is An Equal Opportunity Employer\nAs an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.\nAll employment is decided on the basis of qualifications, merit, and business need. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans’ Readjustment Assistance Act of 1974, Title I of the Americans with Disabilities Act of 1990, and any other applicable federal, state or local laws, applicants who require reasonable accommodation in the job application process may contact ","description_format":"text","description_chars":9268,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Home office"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Compliance","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-13T22:42:25Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":7,"expected_fill_days":49,"reasons":["conf:3","velocity","win:early","comp:junior"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/work-street-grc-engineer-gov-fedramp-20x","json_url":"https://alion.io/job/work-street-grc-engineer-gov-fedramp-20x.json","meta":{"generated_at":"2026-10-21T09:37:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13577,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686337},"rest":"https://alion.io/mcp/rest/get_company?id=686337"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwork-street-grc-engineer-gov-fedramp-20x"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwork-street-grc-engineer-gov-fedramp-20x"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwork-street-grc-engineer-gov-fedramp-20x"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/work-street-grc-engineer-gov-fedramp-20x\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwork-street-grc-engineer-gov-fedramp-20x"}]}