Lead customer technical discovery sessions to understand application architecture, system boundaries, data flows, cloud services, identity and access management, networking, encryption, logging, vulnerability management, configuration management, CI/CD pipelines, external dependencies, security tooling, operational requirements, security posture, and compliance objectives.
Evaluate customer architectures against applicable FedRAMP, NIST SP 800-53, DoD IL4, DoD Cloud Computing SRG, RMF, DISA, and STIG requirements to identify architectural gaps, control gaps, risks, dependencies, and solution requirements.
Serve as a technical advisor to commercial SaaS and software companies pursuing FedRAMP, FISMA, DoD IL4, and other Federal security authorizations.
Translate customer discovery findings into proposed FedRAMP and DoD IL4 solution architectures, including target-state designs, implementation approaches, technical assumptions, compliance considerations, sequencing, and areas requiring additional engineering or security analysis.
Translate Federal cybersecurity and compliance requirements into practical cloud architectures and implementation approaches that sales teams can scope, explain, and position credibly with customers.
Design solutions incorporating public cloud, containers, Kubernetes, serverless computing, cybersecurity, automation, DevSecOps, logging and monitoring, secure networking, identity, encryption, and vulnerability and configuration management.
Develop and deliver architecture diagrams, technical presentations, demonstrations, workshops, discovery readouts, gap summaries, and proofs of concept.
Support technical responses to Federal RFIs, RFPs, RFQs, and other procurement activities.
Develop reusable reference architectures, demonstrations, discovery guides, and technical sales enablement materials for FedRAMP and DoD IL4 opportunities.
Qualifications
Required
8+ years of experience in sales engineering, solutions architecture, cloud engineering, cybersecurity engineering, consulting, or a related technical customer-facing role.
Experience supporting large, complex technology sales opportunities involving Federal agencies and/or commercial software providers entering the Federal market.
Experience working with SaaS or software companies pursuing FedRAMP, DoD IL4, or other Federal security authorizations.
Strong working knowledge of the technical implementation of FedRAMP and NIST SP 800-53 security controls and control families, including Access Control (AC), Identification and Authentication (IA), Audit and Accountability (AU), System and Communications Protection (SC), Configuration Management (CM), System and Information Integrity (SI), Incident Response (IR), and related continuous monitoring requirements.
Ability to discuss how FedRAMP and NIST SP 800-53 controls affect cloud and SaaS architectures and to identify potential architectural, implementation, and control gaps during customer technical discovery.
Working knowledge of DoD IL4 requirements and architectural considerations, including the DoD Cloud Computing Security Requirements Guide (SRG), RMF, DISA requirements, STIGs, boundary definition, data protection, connectivity, identity, logging, vulnerability management, and operational security expectations.
Strong knowledge of FedRAMP, FISMA, RMF, NIST SP 800-53, NIST SP 800-171, DISA requirements, continuous monitoring, and Federal ATO concepts.
Ability to lead technical discovery and translate customer requirements, constraints, risks, and assumptions into compelling FedRAMP and DoD IL4 solution architectures.
Experience communicating complex technical and compliance concepts to engineering, cybersecurity, product, program, sales, and executive audiences.
Strong written, presentation, whiteboarding, and customer-facing communication skills.
Strong understanding of containers, Docker, Kubernetes, managed container platforms (AKS, EKS, ECS, GKE), serverless architectures, secure networking, IAM, encryption, logging, vulnerability management, configuration management, and CI/CD.
Knowledge of infrastructure as code (Terraform), DevSecOps, security automation, policy-as-code, and security tooling.
Strong working knowledge of FedRAMP and Federal Authority to Operate (ATO) processes; FISMA and NIST Risk Management Framework (RMF); NIST SP 800-53 and NIST SP 800-171; FedRAMP/NIST SP 800-53 technical control families, including AC, IA, AU, SC, CM, SI, and IR; DoD Impact Level 4 (IL4); DoD Cloud Computing SRG; RMF; DISA requirements; STIGs; continuous monitoring; security control implementation and assessment concepts; and Federal Zero Trust requirements and architectures.
Understanding of how these requirements affect cloud and SaaS architectures, including system boundaries, data flows, IAM, network security, encryption, logging, vulnerability management, configuration management, CI/CD, external dependencies, incident response, security tooling, and continuous monitoring.
Desired
Experience supporting Civilian, DoD, or Intelligence Community customers.
Experience with FedRAMP authorization, DoD IL4 solutioning, RMF assessments, ATO, and continuous monitoring.
Experience with Zero Trust, Terraform, DevSecOps, CI/CD, security automation, policy-as-code, and security tooling.
(Optional) Professional certifications in AWS, Azure, Google Cloud, Kubernetes, cybersecurity, or Federal security/compliance domains.
Key Competencies
Technical Discovery & Solutioning: Ask probing technical questions, understand complex customer environments, identify gaps and constraints, and translate discovery findings into actionable FedRAMP and DoD IL4 solution architectures.
Federal Security Engineering & Technical Controls: Apply working knowledge of FedRAMP, NIST SP 800-53, DoD IL4, DoD Cloud Computing SRG, RMF, DISA, STIGs, and key technical control families to customer architecture discussions and solution design.
Technical Sales Leadership: Own the technical strategy for complex opportunities and establish credibility with customers.
Federal Compliance Expertise: Translate Federal security requirements into practical technical architectures without positioning the role as an assessor, ISSO, or control owner.
Federal Market Enablement: Help commercial software providers understand and overcome technical barriers to Federal authorization.
Multi-Cloud Architecture: Design and communicate solutions across AWS, Azure, and GCP.
Consultative Selling: Connect customer business and mission objectives to technical solutions, implementation approaches, dependencies, risks, and assumptions.
Executive Communication: Clearly communicate complex cloud, security, and compliance concepts to technical and business stakeholders.
About Quantum Sky
Compensation
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $175,000-$185,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.
Benefits
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.
The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.
At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?
Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.
