Senior GRC Implementation Engineer (FedRAMP / SOC 2)
About the role
Turn control frameworks into working configuration. You will own the technical implementation of FedRAMP High and SOC 2 Type II controls across our proprietary SaaS and managed landing zones, and produce the evidence our clients hand to their auditors.
What you'll do
- Map FedRAMP High, SOC 2 and NIST 800-53 controls to concrete platform configuration and automated checks
- Build "governance-as-code" pipelines that generate System Security Plan artifacts from live configuration
- Run continuous control monitoring and drive remediation of configuration drift with engineering teams
- Prepare evidence packs for client audits and support assessors during authorization cycles
- Advise product teams on control inheritance for newly acquired applications moving into our boundary
What you'll bring
- 5+ years in GRC engineering, security compliance or cloud security
- Hands-on experience delivering a FedRAMP (Moderate or High) or SOC 2 Type II program
- Working knowledge of AWS or Azure security services and infrastructure-as-code
- Ability to explain control intent to engineers and evidence quality to auditors
- US citizenship required for access to FedRAMP boundaries
Nice to have
- CISSP, CISA or CCSP
- Experience with GRC platforms and OSCAL
Compensation
$220,000 – $250,000 per year
Where you land in the range depends on your experience and skills, not on how well you negotiate.
Working at Moraph
We build and operate software for credit unions, hospitals and government agencies, where a failure means a regulatory breach or a patient-safety incident. We work as one team across New York, London, Sydney, Buenos Aires, Yerevan, Mumbai, Manila and more, on the same tools and to the same standards. Everyone gets the same high-spec laptop, software and security tooling, whichever office they work from.
Moraph is an equal opportunity employer. We welcome applicants of every background and provide reasonable accommodations throughout the hiring process. Email careers@moraph.com if you need one.