Peregrine Technologies
Governance, Risk & Compliance (GRC) Lead, Federal
Washington, D.C · Senior
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Our Washington, D.C. office is located in the Dupont Circle neighborhood, and this role is expected to be hybrid, with 4 in-office days per week.
Responsibilities
- Own Peregrine's FedRAMP High authorization program - sustaining and expanding our existing ATO through continuous monitoring, remediation, and reauthorization, including Peregrine's transition from FedRAMP Rev. 5 toward applicable FedRAMP 20x requirements.
- Translate FedRAMP, NIST, federal agency, DoW and Intelligence Community requirements into technical and operational controls and establish the control architecture necessary to support IL4, IL5, and ultimately IL6 deployments alongside ICD 503 environments.
- Lead agency-specific system authorizations, from initial engagement through ATO issuance and ongoing sponsorship.
- Partner with Security and Infrastructure Engineering to evaluate system boundaries, Identity, Credential, and Access Management (ICAM), network security, encryption and key management, logging, vulnerability and configuration management, hardening, supply-chain security, and incident response against federal and DoW requirements.
- Lead authorization artifacts, control implementation statements, evidence, assessment responses, and continuous-monitoring deliverables while ensuring documented controls are supported by architecture, configuration, automation, procedures, and operating evidence.
- Drive assessment findings and control gaps to closure and develop scalable control ownership, evidence collection, monitoring, and compliance-automation practices that improve the efficiency and quality of Peregrine's assurance program.
- You are comfortable operating as a senior individual contributor with broad organizational influence and can drive programs across engineering, security, product, legal, operations, and customer-facing teams.
Requirements
- Technical understanding of cloud security architecture, including hands-on experience with AWS or AWS GovCloud, Kubernetes or containerized environments, Infrastructure as Code, and modern CI/CD.
- Experience with ICD 503 accreditation and the authorization of National Security Systems, classified systems, or cross-domain solutions.
Nice to have
- Preferred Certifications
Compensation
- Annual Salary + Benefits + Equity (if applicable) + Bonus (if applicable)
Company info
- We are motivated to help institutions solve their hardest problems through better decision-making.
- We are passionate about creating cutting-edge, highly scalable data platforms that enable organizations to transform the way they interact with their data.
- You can turn complex or evolving requirements into defensible implementation strategies and communicate technical security issues clearly to engineers, executives, assessors, customers, and government security officials.
- Experience supporting federal or defense customers in environments involving CUI or other sensitive government information.
Visa & Work Authorization
- Lead agency-specific system authorizations, from initial engagement through ATO issuance and ongoing sponsorship.
This listing is sourced directly from Peregrine Technologies's careers page and normalized into a canonical job model.