Senior Compliance Engineering Architect (FedRAMP 20x

Senior Compliance Architect

Uber Ether is a leader in the hyper-secure infrastructure space for Identity and Access Management (IAM), Zero Trust and compliance acceleration. Our platform and expert services team enable government and commercial customers to have ultimate control over access to critical information. We're looking for employees who get excited about pioneering novel solutions to new, complex challenges. This role sits within Uber Ether's Compliance Business Unit, supporting a FedRAMP 20x advisory project built on Google Cloud Platform (GCP).

As Senior Compliance Architect, you will serve as the technical bridge between FedRAMP 20x compliance requirements and platform engineering, translating Key Security Indicators (KSIs) into a concrete, defensible GCP-native platform architecture — ensuring the environment meets assessor expectations and holds up under continuous monitoring.

Strategic Technical Leadership

• Serve as the principal technical authority translating FedRAMP 20x KSI requirements into platform architecture decisions for the engagement
• Define and maintain the technical roadmap for mapping all KSIs across the FedRAMP KSI families to concrete GCP services, configurations, and evidence sources for the Advantage compliance model
• Lead architecture reviews and design sessions with engineering leadership to ensure GCP deployments satisfy FedRAMP 20x assessment requirements
• Drive technical decision-making on control inheritance, continuous monitoring strategy, and KSI verification approach for a GCP-hosted identity platform
• Partner with the Compliance BU leadership team to translate FedRAMP 20x milestones into technical initiatives and delivery rocks
• Establish architectural standards and design patterns for KSI-mapped platform components that can be reused across future GCP engagements

GCP Platform Architecture & KSI Mapping

• Own the end-to-end technical architecture that maps all FedRAMP 20x KSIs onto concrete Advantage GCP service configurations, IAM policies, and network controls
• Lead the design of Infrastructure as Code templates (Terraform, Deployment Manager) that encode KSI requirements directly into GCP deployments
• Drive automation initiatives that generate continuous compliance evidence directly from GCP-native logging, monitoring, and security services
• Provide architectural guidance on GCP IAM, VPC Service Controls, Cloud KMS, and Security Command Center as they relate to KSI satisfaction
• Collaborate with the Engineering team to align GCP-specific automation with Uber Ether's existing Git Lab and Terraform tooling
• Champion a KSI-first design approach so security and compliance controls are architected in from day one, not retrofitted

Customer Success & Technical Advisory

• Serve as the escalation point for complex FedRAMP 20x KSI questions from the engineering and Customer Success teams
• Lead technical architecture workshops with stakeholders to walk through KSI-to-control mappings and remediation paths
• Provide expert guidance on translating KSI evidence requirements into System Security Plan (SSP) and machine readable/OSCAL-based technical documentation
• Support pre-sales and advisory activities by explaining FedRAMP 20x architecture decisions during customer briefings
• Translate platform requirements into technical designs that align with Advantage delivery model
• Drive continuous improvement of the KSI mapping based on assessor feedback, CR26 verification results, and evolving FedRAMP 20x guidance

Compliance Architecture & Continuous Monitoring

• Work closely with the Dev Ops and Support functions to ensure GCP monitoring, dashboards, and alerting align with KSI evidence requirements
• Lead the technical design of automated KSI verification, including how each of the KSI families is evidenced on an ongoing basis
• Provide architectural guidance for remediation runbooks and system hardening standards specific to GCP-hosted workloads
• Support 3
  
  PAO assessments and FedRAMP 20x reviews by explaining the platform architecture and how it satisfies each KSI
• Drive adoption of Policy as Code and OSCAL-based evidence generation across the platform
• Ensure proper integration between GCP-native security tooling and Uber Ether's compliance automation approach

Cross-Team Collaboration & Mentorship

• Foster technical collaboration between Uber Ether's Compliance BU and engineering team through regular architecture syncs
• Mentor engineers on GCP architecture, FedRAMP 20x KSI requirements, and secure design principles
• Lead retrospectives focused on improving the KSI-to-architecture mapping process for future GCP engagements
• Participate in Level 10 (L10) meetings, providing technical insight on progress and cross-team dependencies
• Develop training content to help engineers understand FedRAMP 20x KSI requirements and their architectural implications
• Serve as a technical ambassador for Uber Ether's FedRAMP 20x advisory capabilities with future GCP customers

• Bachelor's degree in Computer…