Compliance Engineer

Palantir Palantir · Enterprise · Washington, DC · Information Security

This role focuses on implementing and managing US Government compliance controls (FedRAMP, CMMC, IL5, IL6) for Palantir's product line. It involves interpreting regulatory frameworks, providing guidance on technical architecture and operations, and building automation for compliance processes. The role requires experience with cloud infrastructure, security concepts, and various compliance standards.

What you'd actually do

  1. Implement all aspects of US Government compliance, including FedRAMP, IL5, and IL6 continuous monitoring and compliance audits.
  2. Support partnerships with various agencies (DoD, HHS, etc.), 3PAOs, and the FedRAMP PMO.
  3. Partner with engineers to interpret and map compliance requirements to product implementation.
  4. Directly facilitate operational and regulatory outcomes, including continuous monitoring and compliance audits.
  5. Build automation for procedural compliance controls.

Skills

Required

  • Experience with US Government compliance (FedRAMP, CMMC, IL5, IL6, FISMA, NIST 800-53)
  • Experience with cloud infrastructure and security concepts
  • Experience with distributed applications on cloud infrastructure (AWS, Azure, GCP)
  • Experience with security controls for cloud automation and configuration tooling (Terraform, Puppet, Jenkins)
  • Proficiency with security concepts (encryption, authentication)
  • Proficiency with tooling for continuous monitoring (Tenable, Splunk)
  • Hands-on experience in executing against recurring operational regulatory requirements
  • Ability to clearly communicate compliance requirements to internal engineering teams and associated implementation to external customers
  • Willingness and eligibility to obtain a U.S. security clearance

Nice to have

  • Experience with PCI, SOC2, HIPAA compliance

What the JD emphasized

  • US Government regulatory frameworks
  • FedRAMP
  • CMMC
  • IL5
  • IL6
  • compliance audits
  • continuous monitoring
  • 3+ years experience with compliance (PCI, SOC2, HIPAA, etc.) with at least 2 years related to US Government compliance and audit experience (e.g FedRAMP, IL5, CMMC, FISMA, NIST 800-53, etc.)