Note: The job is a remote job and is open to candidates in USA. Zachary Piper Solutions is currently seeking a Continuous Monitoring Engineer to support a federal client. This position is critical in safeguarding cloud environments and maintaining compliance with federal security standards, focusing on cloud asset inventory management, vulnerability scanning, and FedRAMP continuous monitoring.
Responsibilities
- Build, validate, and maintain accurate cloud asset inventories across environments, ensuring full visibility of infrastructure components
- Reconcile missing assets and ensure complete scan coverage across virtual machines, containers, databases, networking, and application layers
- Execute and troubleshoot vulnerability scans, identifying coverage gaps and remediating technical issues
- Support FedRAMP continuous monitoring processes, ensuring adherence to required timelines and deliverables
- Maintain and update Plans of Action & Milestones (POA&Ms), accurately tracking vulnerabilities and remediation efforts
- Produce monthly continuous monitoring deliverables for federal stakeholders
- Apply working knowledge of NIST 800-53 controls, specifically RA-5 (Vulnerability Scanning), SI-2 (Flaw Remediation), and CM-6 (Configuration Settings)
- Identify false positives in scan results and communicate remediation priorities effectively
- Troubleshoot technical issues independently, researching solutions prior to escalation
- Proactively communicate blockers, follow up on access requests, and ensure timely completion of tasks
- Partner with engineering teams and federal stakeholders to communicate findings and drive remediation efforts
- Demonstrate ownership of assigned work and operate independently after initial onboarding
Skills
- 3–5+ years of experience in cloud security, vulnerability management, or continuous monitoring
- Hands-on experience building and maintaining cloud asset inventories
- Strong understanding of cloud infrastructure, including: Virtual machines, Containers, Databases, Networking, Application assets
- Experience supporting FedRAMP or similar compliance frameworks
- Familiarity with continuous monitoring processes and monthly compliance reporting
- Experience maintaining POA&Ms and supporting audit documentation
- Working knowledge of NIST 800-53 controls (RA-5, SI-2, CM-6)
- Demonstrated ability to troubleshoot independently
- Demonstrated ability to research and apply solutions
- Demonstrated ability to learn new technologies quickly
- Demonstrated ability to connect technical concepts beyond documented procedures
- Strong communication skills with the ability to clearly explain technical findings to both engineers and federal stakeholders
- Ability to work independently with minimal supervision in a remote environment
Benefits
- Health, Dental, Vision
- PTO
- 401K
- Holidays
- Sick Leave if required by Law
Company Overview