Senior Cloud Governance & Compliance Engineer (Turbot Guardrails Specialist)

Job Requirements Sheet

Role: Senior Cloud Governance & Compliance Engineer (Turbot Guardrails Specialist)

• Position Type: Full-Time (W2) or Long-Term Contract (1099)
• Location: Remote (U.S. Based) / Preference for Washington, D.C. area
• Clearance Requirement: Ability to obtain/maintain a VA Tier 4 (BI) / High-Risk Public Trust clearance. ship or Permanent residency with 3 years continuous residence in the US over the last 3 years. 

Position Overview

We are seeking a senior hands-on Cloud Infrastructure and Governance Engineer to lead the architecture, policy deployment, and continuous monitoring of our multi-cloud federal enclaves. In this role, you will be the primary subject matter expert responsible for managing enterprise compliance across the VA Enterprise Cloud (VAEC) enclaves spanning AWS GovCloud High and Azure Government. You will leverage Turbot Guardrails to replace manual audits with automated, real-time, self-healing governance rules to protect federal data assets.

Core Responsibilities

• Automated Guardrail Engineering: Design, write, and deploy real-time self-healing compliance policies natively using Turbot Guardrails across both AWS GovCloud and Azure Government.
• Federal Compliance Automation: Map Turbot automated controls directly into the system's System Security Plan (SSP) and continuous monitoring frameworks under NIST SP 800-53 Rev 5 and FedRAMP High baselines.
• Cryptographic Enforcements: Ensure all cloud resources and automated governance boundaries adhere strictly to FIPS 140-2 cryptographic mandates for data at rest and in transit.
• VAEC System Integration: Collaborate with the Cloud Operations and Migration Services (COMS) team to align Turbot logging and governance frameworks with overlapping monitoring systems like Splunk, ScienceLogic, and Nessus.

Required Qualifications & Technical Skills

• Turbot Expertise: Minimum 3+ years of direct experience architecting, configuring, and maintaining Turbot Guardrails at an enterprise scale.
• Multi-Cloud Government Infrastructure: 6+ years of experience engineering secure cloud infrastructure inside AWS GovCloud and Azure Government.
• Federal Compliance Frameworks: Deep practical knowledge of FedRAMP High/Moderate baselines, FISMA requirements, and NIST SP 800-53 guidelines.
• Security & Encryption Standards: Proven experience implementing FIPS 140-2 validated encryption modules across public cloud storage, database, and compute resources.
• DevOps/IaC Skills: Proficient with Infrastructure as Code (Terraform, CloudFormation, or Azure ARM templates) and writing programmatic automated policies.

Preferred Qualifications

• Prior direct experience working within the VA Enterprise Cloud (VAEC) or managing tools inside the VAECOT suite.
• AWS Certified Security – Specialty or Microsoft Certified: Azure Security Engineer Associate certifications.