Sr. Security Engineer II – IRAP Program Lead

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

The Sr. Security Engineer II – IRAP Program Lead will own the strategy, execution, and ongoing management of key government security compliance programs. This role requires deep expertise in regulatory frameworks, strong technical understanding, and the ability to collaborate across engineering, compliance, and external stakeholder teams.

• Lead end-to-end security compliance programs, including roadmap development, assessment coordination, remediation activities, and ongoing authorization maintenance.
• Manage government compliance initiatives across international frameworks, ensuring alignment with evolving regulatory requirements.
• Serve as the primary point of contact for external assessors, government agencies, and compliance stakeholders.
• Develop and maintain detailed security documentation, including system security plans, control mappings, evidence repositories, and compliance narratives.
• Coordinate continuous monitoring activities, quarterly updates, and ongoing assurance processes to maintain compliance readiness.
• Own remediation planning by identifying findings, prioritizing risks, tracking corrective actions, and ensuring timely closure of compliance gaps.
• Partner with product, engineering, and security teams to evaluate system changes and determine compliance impacts.
• Build efficient evidence collection processes and maintain audit trails demonstrating security control effectiveness.
• Drive automation initiatives that improve compliance workflows, reduce manual processes, and increase operational efficiency.
• Translate complex technical and security concepts into clear documentation for both technical teams and government audiences.
• Monitor changes in security frameworks and industry standards to proactively improve compliance strategies.
• Support broader security initiatives and contribute to strengthening organizational security practices.

Requirements:

The ideal candidate has significant experience managing government security compliance programs, with strong knowledge of cloud security, regulatory frameworks, and audit processes. This role requires technical depth, excellent communication skills, and the ability to operate effectively across global and cross-functional environments.

• 5+ years of hands-on experience with government security compliance frameworks, including direct experience with programs such as IRAP, ISMAP, FedRAMP, or comparable national security frameworks.
• Strong knowledge of government security standards, control frameworks, risk management practices, and cloud compliance requirements.
• Experience managing security assessments, working with external auditors, and translating findings into remediation plans.
• Understanding of international government compliance environments and risk-based security evaluation processes.
• Technical foundation in cloud architecture and security, including experience with AWS, Azure, or GCP environments.
• Knowledge of cloud security controls, infrastructure-as-code, logging, incident response, and compliance-focused architectures.
• Experience operating continuous monitoring programs and maintaining compliance in evolving regulatory environments.
• Strong documentation skills with the ability to create security plans, control narratives, and audit-ready materials.
• Excellent written and verbal communication skills, with the ability to explain technical concepts to diverse audiences.
• Degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
• Ability to work legally in the United States on an ongoing basis.

Nice to have:

• Professional security certifications such as CISSP, CISM, CISA, ISO 27001 Lead Auditor, or equivalent.
• Experience with multiple government compliance frameworks, including FedRAMP, CMMC, or other national programs.
• Familiarity with cloud service provider compliance or SaaS security operations in international markets.
• Japanese language skills or experience working within Australian or Japanese government security environments.

Benefits:

• Competitive base salary range of $175,000 - $245,000 USD, depending on experience, skills, and location.
• Market-competitive incentive opportunities.
• Employer-subsidized medical, vision, and dental coverage.
• 401(k) matching program to support long-term financial planning.
• Monthly stipend to support remote work and productivity.
• Flexible Time Away Program and paid sick leave.
• Company-paid life insurance and short-term and long-term disability coverage.
• 12 paid holidays annually.
• Up to 24 weeks of parental leave.
• Paid volunteer day to support community initiatives.
• Access to professional development resources, including online learning opportunities.
• Company-funded perks, wellness resources, and employee discounts.
• Remote work flexibility from registered locations within the United States.