2+ FedRAMP Jobs in India

Greetings from zealous sevices!

GoLang (Soln Architect) -(9 AM to 6PM) 

Experience: 10-12 Yrs 

Need a senior Solution Architect - No BGV - ok with consultants 

Own end-to-end solution architecture for a cloud-based cybersecurity platform operating at massive scale (millions of assets), spanning multiple product modules and a broad third-party integration ecosystem.

What They'll Do 

Define and own the overall solution architecture across multiple product modules (e.g., detection, response, asset inventory, reporting), ensuring they work as a coherent, scalable system rather than disconnected parts 

Design for scale: architecture that reliably handles millions of assets/endpoints with predictable performance, cost, and reliability as volume grows 

Lead cloud infrastructure architecture decisions, compute, storage, networking, multi-region/multi-tenant strategy, disaster recovery 

Architect and govern third-party integrations (SIEM/SOAR, ticketing, identity providers, cloud provider APIs, threat intel feeds, etc.), define integration patterns, data contracts, and reusable frameworks rather than one-off connections 

Create and maintain architecture roadmaps, capacity plans, and technical strategy aligned with product/business roadmap 

Set architectural standards and guardrails (scalability, security, data flow, API design) across engineering teams 

Act as the technical bridge between engineering, product, security, and infrastructure/DevOps teams 

Conduct architecture reviews, threat-model system designs, and identify scaling bottlenecks or single points of failure before they hurt production 

Own key non-functional requirements: performance, availability, security, cost-efficiency, compliance 

Support presales/enterprise customer conversations on architecture, especially for large or complex deployments 

Evaluate and select core technologies (data stores, messaging systems, orchestration, IaC tooling) 

What They Should Have 

8–12+ years in software/infra engineering, with 4+ years specifically in a solution/enterprise architect role 

Proven experience architecting systems at scale (millions of records/assets/events), not just designing on paper, but having operated such systems in production 

Deep cloud architecture expertise (AWS/GCP/Azure), multi-account/multi-tenant design, cost optimization, networking, IAM 

Strong grasp of distributed systems patterns: data partitioning, eventual consistency, event-driven architecture, caching strategies

Experience designing integration architectures (APIs, webhooks, message queues) across many heterogeneous third-party systems 

Security architecture fluency,this is a security product, so the architect must think adversarially about their own system 

Ability to produce architecture documentation (C4 diagrams, ADRs, data flow diagrams) that both engineers and executives can use 

Track record of cross-functional influence, able to align multiple engineering teams around a shared architecture without direct authority 

Cybersecurity domain knowledge (SIEM/EDR/CNAPP/CSPM concepts, threat detection pipelines), or equivalent adjacent domain with fast ramp-up ability 

Nice to Have 

Experience with specific integration ecosystems relevant to your product (e.g., Splunk, ServiceNow, Okta, AWS Security Hub) 

Familiarity with IaC (Terraform), service mesh, and Kubernetes at scale Enterprise/regulated-industry experience (SOC 2, FedRAMP, ISO 27001) shaping architecture decisions 

Prior experience scaling a product from ""hundreds of thousands"" to ""tens of millions"" of managed assets

What will you do?

Governance and Policy Development   

·         Develop, implement, and maintain governance policies, SOPs, and related documentation. 

·         Ensure all policies align with industry standards (e.g., FedRAMP, NIST SP 800-53, ISO 27001 family, and HIPAA). 

·         Monitor policy effectiveness and recommend updates based on organizational changes or regulatory updates. 

Risk Management   

·  Conduct risk assessments to identify vulnerabilities, threats, and compliance gaps. 

·  Collaborate with cross-functional teams to design and implement remediation strategies. 

·  Maintain risk registers and monitor mitigation efforts. 

Compliance Oversight   

·  Support the organization in achieving and maintaining FedRAMP certification. 

·  Manage periodic audits, security assessments, and readiness activities for compliance frameworks. 

·  Track and report on compliance metrics, audit findings, and resolution status. 

Training and Awareness   

·  Develop and deliver training programs to enhance employee understanding of compliance policies and procedures. 

·  Act as a point of contact for compliance-related queries within the organization. 

Incident Response and Reporting   

·  Support incident response processes to ensure effective investigation and reporting of compliance-related incidents. 

·  Collaborate with stakeholders to implement corrective actions and prevent recurrence. 

Vendor and Third-Party Risk Management   

·  Assess third-party vendors for compliance with organizational policies and standards. 

·  Ensure contracts include appropriate compliance requirements. 

What do you bring to the table?

Education & Experience   

·  Overall 12- 15 years of relevant experience

·  Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or related field (Master’s preferred). 

·  3+ years of experience in governance, risk, and compliance roles, with specific experience in FedRAMP compliance.  

Knowledge & Skills   

·  Strong understanding of FedRAMP, NIST SP 800-53, ISO 27001, and other relevant frameworks. 

·  Experience in drafting policies, procedures, and SOPs. 

·  Familiarity with GRC tools and platforms (e.g., Archer, ServiceNow GRC). 

·  Excellent communication and documentation skills. 

·  Analytical mindset with attention to detail. 

Certifications (Preferred)   

·  Certified Information Systems Security Professional (CISSP) 

·  Certified Information Systems Auditor (CISA) 

·  Certified Information Security Manager (CISM) 

·  ISO 27001 Lead or Internal auditor