Principal Engineer - FedRAMP & Certifications

$228,000 - $285,000/Yr

Cloudera - Santa Clara, CA

Full-time - Director

Remote - Santa Clara, CA

Publishing Industries

About the position

At Cloudera, we empower people to transform complex data into clear and actionable insights. With as much data under management as the hyperscalers, we're the preferred data partner for the top companies in almost every industry. Powered by the relentless innovation of the open source community, Cloudera advances digital transformation for the world's largest enterprises. The FedRAMP & Certification Engineering Team at Cloudera collaborates with multiple Engineering teams to ensure the Controls are reviewed and implemented in its entirety. As we embark on the journey towards getting Government certifications such as FedRAMP Moderate/High/IL5, IRAP and others, ensuring a Technical Hands-on Principal Engineer with experience around these certifications is very critical for the role. FedRAMP & Certifications Engineering team is a centralized Engineering organization that is responsible for all Government certifications in the US and other countries. The team will work with Vendors assessing the Cloudera Product gaps and building roadmaps and execution plans working with Product Management. The team will also be collaborating with all Cloudera product service Engineering teams and ensure the controls are communicated and help in addressing the product gaps.

Responsibilities

• Design and implement Kubernetes cloud features in CDP that adheres to the security controls as needed for Government certifications
• Solve complex technical problems associated with security controls for services deployed in Kubernetes on Cloud Environment
• Analyze large-scale distributed systems to identify performance bottlenecks, scalability issues, failure points, and security holes
• Be hands-on with AWS and/or Azure PaaS, CaaS and other cloud infrastructure components
• Work with K8s and technologies such as EKS, AKS, OpenShift, etc. in production
• Lead, design, build & maintain large scale high performing, secure Kubernetes and other application platform infrastructure on AWS, Azure, GCP, etc.
• Formulate and present your architecture and design documents
• Provide deep-dives on the capabilities of FIPS, TLS, DISA STIG, Certificate Management
• Provide input to internal teams with regard to implementation of FedRAMP and other security frameworks and how they impact product updates or organizational processes
• Stakeholder engagement with both Internal and External, including legal, sales, product/enterprise teams, 3PAO, sponsoring agency, and FedRAMP PMO
• Contribute to productivity, process and infrastructure improvement
• Collaborate with product managers and customers to understand requirements
• Manage cross team performance issues from identification of the cause, determining the areas of improvement and driving those actions to closure
• Engage within the Cloudera community and evangelize our products externally (via blogs, meetups, industry events) and contribute to internal and external knowledge repositories
• Work primarily in our US offices (Austin or Santa Clara). US Remote is an option

Requirements

• 6+ years of professional work experience in a similar position
• 3+ years of hands on experience with Kubernetes or related container technologies
• 3+ years of experience on compliance controls
• Software development experience in Java, Golang, Python
• Good understanding and hands-on experience of FedRAMP compliance requirements, including impact level moderate, high and IL5
• A big plus will be if you have delivered an enterprise SaaS product achieving FedRAMP High authorization
• Hands-on experience of other compliance requirements is highly desirable, such as DoD IL5, FIPS, TLS, DISA STIG
• 5+ years of hands-on experience in IT auditing and/or compliance
• Recent hands-on concentration of work with FedRAMP Framework (audit and compliance experience)
• Previous experience leading a Cloud Service Provider through a FedRAMP ATO process
• Expertise in more than one of the following areas: Security Architecture, Security Consulting, Identity and Access Management (IAM), Network Security, Security Engineering, Incident Handling, Intrusion Detection, Firewalls, Vulnerability Management, Unix security, Encryption, and Endpoint Security, DevOps, Systems Administration
• Act as a FedRAMP Security SME/Consultant for projects and inquiries from product, development, and IT teams
• Familiarity with operating SaaS services which adhere to compliance requirements like SOC2 and FedRAMP
• Bachelor's Degree or equivalent experience in a Technical Field
• Excellent communication skills
• US citizens physically residing in the US, as required by the US government

Nice-to-haves

• Experience with other compliance frameworks beyond FedRAMP
• Experience in a leadership role within a technical team
• Familiarity with cloud service provider environments and their compliance requirements

Benefits

• Generous PTO Policy
• Support work life balance with Unplugged Days
• Flexible WFH Policy
• Mental & Physical Wellness programs
• Phone and Internet Reimbursement program
• Access to Continued Career Development
• Comprehensive Benefits and Competitive Packages
• Paid Volunteer Time
• Employee Resource Groups