Senior Principal Technical Program Manager, FedRAMP & Public Sector

Senior Principal Technical Program Manager

Autodesk is seeking a Senior Principal Technical Program Manager to lead security-focused technical programs for Autodesk's FedRAMP and Public Sector cloud initiatives. This role is part of our Trust organization, reporting to the Senior Director of Information Security Engineering. This role coordinates cross-functional execution across security, compliance, engineering, infrastructure, operations, and product teams to deliver secure, compliant, and operationally ready cloud services for regulated environments.

This is a senior individual contributor role for someone who can operate independently in ambiguous, high-risk programs. The ideal candidate brings deep technical program management experience, strong cloud security fluency, and the ability to translate FedRAMP and Public Sector requirements into clear execution plans, ownership models, control-readiness milestones, dashboards, and executive-level decisions. This role is not customer-facing, but may require coordination with internal compliance partners, third-party assessors, auditors, regulators, agency sponsors, or authorization stakeholders.

This role is remote-friendly within North America. For those who prefer in-office or hybrid work, the role can be based in San Francisco, CA;
Portland, OR;
Boston, MA; or Denver, CO. Travel requirements are approximately 20%.

In accordance with U.S. government contracting and FedRAMP compliance obligations, this role requires U.S. citizenship or U.S. lawful permanent residency. Employment is contingent upon meeting all applicable government security and eligibility requirements.

• Coordinate strategic security programs for Autodesk's FedRAMP and Public Sector cloud initiatives, including planning, execution, dependency management, risk management, and leadership reporting
• Translate FedRAMP, Public Sector, cloud security, compliance, and operational-readiness requirements into actionable engineering plans and measurable program outcomes
• Establish and maintain program operating models, including RACIs, decision forums, execution cadences, escalation paths, and stakeholder communication mechanisms
• Drive cross-functional alignment across engineering, security, compliance, infrastructure, operations, product, legal, and business teams. Maintain trusted systems of record across Jira, Confluence, dashboards, and reporting tools, ensuring work has clear owners, due dates, status, blockers, dependencies, and decision paths
• Identify and manage technical, compliance, operational, organizational, and schedule risks; escalate with clear options, tradeoffs, and recommendations
• Facilitate senior-level decision-making across complex technical and regulatory topics, including service onboarding, identity and access management, third-party services, operational readiness, and secure cloud delivery
• Create scalable program mechanisms that support FedRAMP execution while extending to broader Public Sector requirements over time
• Coach and guide other TPMs, workstream leads, and partner teams on effective regulated-cloud program execution

• 12+ years with a bachelor's degree, 10+ with a master's, or equivalent practical experience
• 10+ years leading complex technical initiatives in technical, engineering, or security program management, or equivalent experience
• 5+ years leading high-impact, cross-functional programs across engineering, security, compliance, cloud infrastructure, operations, and product teams
• Demonstrated security leadership translating complex cloud security, compliance, and risk requirements into executable engineering programs across IAM, vulnerability management, secure SDLC, incident response, logging/monitoring, change management, privileged access, encryption, and controls
• Working knowledge of FedRAMP, NIST 800-53, RMF, cloud security, regulated SaaS, or similar security and compliance frameworks
• Strong technical fluency in cloud platforms, SaaS architecture, IAM, service onboarding, secure SDLC, operational readiness, and incident, change, and problem management
• Excellent communication and stakeholder management skills, including influencing senior leaders and technical teams without direct authority

• Direct experience with FedRAMP authorization programs, continuous monitoring, audit readiness, control implementation, POA&M/remediation tracking, or federal cloud operations
• Experience with AWS Gov Cloud, Azure Government, DoD IL, CMMC, ITAR, StateRAMP, IRAP, Cyber Essentials Plus, and/or similar Public Sector requirements
• Experience using Jira, Confluence, dashboards, GRC tools, service catalogs, and evidence repositories to manage enterprise-scale programs
• Experience leading regulated-cloud service onboarding, platform modernization, regionalization, identity/security modernization, or operational-readiness programs
• CISSP, PMP, PgMP, CSM, SAFe, CEH, CRISC, CCSK, or similar certification is helpful but not required