Teams at Coalfire

Manage POA&Ms, collect and maintain security evidence, run and analyze vulnerability scans across systems, cloud, containers, and web apps, translate findings to federal stakeholders, integrate vulnerability management into CI/CD and cloud environments, maintain vulnerability tooling, track remediation, and improve processes and documentation to support FedRAMP/HITRUST/PCI compliance.

Design and own FedRAMP reference architectures across AWS, Azure, and GCP. Set engineering standards, review custom architectures, mentor engineers, support continuous delivery and compliance automation, and represent Coalfire in FedRAMP community and strategic pursuits.

Design, build, and deploy repeatable FedRAMP-aligned security capabilities using IaC and automation. Implement continuous monitoring, validate compliance evidence, deploy into client environments, mentor junior engineers, and contribute documentation and runbooks.