Coalfire

Lead and manage public sector advisory engagements, ensuring high-quality delivery of compliance assessments and managing a small team while maintaining client relationships. | At least 5 years in IT security or auditing with deep knowledge of NIST, FISMA, FedRAMP, a bachelor's degree, and a professional certification such as CISSP, CISA, or cloud-specific certification. | About Coalfire Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world. But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference. Position Summary: The Manager, Public Sector Advisory will support Public Sector advisory engagements while managing and mentoring team members. The role combines people leadership, project delivery, and client engagement, with accountability for high-quality delivery, project margin, utilization, and adherence to established methodologies. You will lead and support advisory engagements across the Public Sector frameworks, maintain strong client relationships throughout the engagement lifecycle, and provide oversight across compliance frameworks such as FedRAMP, CMMC, DISA Cloud SRG, FISMA, etc. This role includes reviewing and developing compliance documentation, ensuring quality through peer reviews, collaborating with internal stakeholders, and supporting IT security consulting for cloud and on‑premises environments. As a leader, you will mentor locally based consultants, foster client relationships and lead various engagements within the Public sector advisory team. As part of your responsibilities, you will directly manage and mentor 2-3 team members, building a culture of accountability and excellence while nurturing high-trust partnerships with clients and stakeholders across all levels of their organizations throughout the engagement lifecycle. This role requires a deep understanding of compliance framework requirements, including the list of frameworks noted above. You will provide advisory consulting support, develop compliance-related reports and documentation, and ensure quality control through peer reviews of project deliverables. Collaboration will be central to your work, as you’ll partner with sales, quality management, and delivery teams to ensure project timelines and deliverables are met while maintaining strong customer satisfaction. Mentorship and coaching will be key elements of your leadership. You will guide team members in technology, consulting methodologies, technical reviews, and professional writing, ensuring they meet project margin and utilization targets. Additionally, your expertise will contribute to the success of IT system security consultations for both cloud-based and on-premises environments. As a relationship builder, you’ll establish trust with accounts, identify upsell and cross-sell opportunities, and escalate these to the sales team as appropriate. Your ability to cultivate collaborative partnerships will ensure client satisfaction across all engagements. To stay ahead of industry trends, you’ll actively pursue professional development opportunities and encourage continuous updates to team policies, procedures, and training in alignment with best practices. Finally, your strategic contributions will support organizational goals, helping grow the service line and expand the team’s capabilities. By focusing on successful project outcomes and client satisfaction, this role will blend technical expertise, leadership, and strategic vision to drive the success of the Public sector advisory team. \n What You'll Do People Management Directly manage and mentor consultants, fostering a culture of accountability, collaboration, and continuous improvement. Provide day-to-day leadership, coaching, and performance feedback to team members aligned with project and practice expectations. Support team member onboarding, training, and ongoing skills development. Assist with resourcing decisions, workload planning, project margin and utilization management. Client Engagement & Project Delivery Support advisory engagements across the full project lifecycle, including planning, execution, review, and closure. Maintain clear, professional communication with client stakeholders at multiple levels. Escalate project risks, issues, or resourcing concerns in a timely and effective manner. Partner with internal delivery, quality, and sales teams to ensure client satisfaction and successful outcomes. Identify potential upsell and cross-sell opportunities and escalate them to appropriate sales stakeholders. Technical Execution Execute and oversee compliance assessments aligned with recognized frameworks, including but not limited to FedRAMP, CMMC, DISA Cloud SRG, and various international frameworks noted in the description above. Lead and perform interviews, examinations, and testing procedures to validate control implementation. Develop, review, and maintain IT security documentation, including policies, procedures, risk assessments, and supporting artifacts. Advise clients on improving security programs, compliance posture, and risk management practices. Support IT system security initiatives for both cloud-based and on-premises environments. Quality, Knowledge & Practice Contribution Perform quality reviews of project deliverables to ensure accuracy, completeness, and alignment with framework requirements. Mentor project teams on compliance methodologies, technical standards, and professional writing. Stay current with industry trends, emerging risks, and evolving compliance requirements. Contribute to the development and maintenance of internal policies, procedures, tools, and training materials. What You'll Bring Minimum of 5 years or more of working experience in information technology, information security, technical assessment, or audits Substantial knowledge of security control requirements (NIST, FISMA, FedRAMP, CMMC, DoD, etc.) and how they overlap with additional frameworks Significant experience in understanding and applying relevant technical knowledge in FISMA/FedRAMP and other compliance framework assessments within moderate and large hyperscale CSP environments Knowledge in conducting multi-framework consolidated compliance assessment activities Detailed understanding of IT security technologies including network and application security, firewalls, access management, and data protection Experience with virtualization and cloud technologies Experience with client-server and traditional on-premises architecture Familiarity with statutes and regulations across multiple industries relevant to IT Demonstrated ability to lead moderately complex system assessments/consulting engagements independently Demonstrated ability to assist team members with proper artifact collection and interviewing clients to ascertain control implementation details Demonstrated ability to read and interpret all control families Demonstrated ability to read and interpret firewall rulesets and to create network/boundary/data flow diagrams Strong written and verbal communication skills including the ability to explain technical matters to a non-technical audience Strong consulting skills; ability to advise and challenge the status quo while building strong relationships Ability to build high-trust relationship and credibility quickly Ability to lead projects successfully and delegate up and across Strong attention to detail Strong problem solving, decision making, organizational and analytical skills Ability to prioritize and manage multiple initiatives/projects. Ability to be self-driven and have strong independent initiative. Strong excel skills with ability to develop worksheets with complex formulas Ability to facilitate meetings to small or large groups Diplomatic and broad minded Ability to lead teams small to large teams in the assessment and internal environments Ability to speak to Cloud Service Providers to resolve issues and come to a conclusion of the assessment At least one of the following Advanced certifications or equivalent in cybersecurity or cloud: CISSP, CISA, CISM, CAP, CRISC, CMMC CCP, and/or cloud specific certification (AWS,GCP, or Azure) or specialty certification in security Bachelor's degree (four-year college or university) or equivalent education and experience Bonus Points Strong knowledge of container-based architectures Knowledge of various cloud environments, including AWS, GCP, and Azure. Bachelors of Science degree in a technical field (CIS, MIS, IT, Engineering, or related field) \n $104,000 - $173,000 a year The salary range listed is a reasonable estimate of the compensation range for this role based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. \n Why You’ll Want to Join Us At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office. Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options. At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at HumanResourcesMB@coalfire.com.

Lead and manage geographically distributed development teams, oversee technical architecture and security, coordinate with stakeholders and vendors, and drive software development best practices. | 10+ years experience with C#, JavaScript, agile development, secure architecture, cloud platforms, container orchestration, serverless, CI/CD, and team leadership. | Description: • Manage geographically distributed team of various experience levels across multiple projects • Foster a collaborative and inclusive team culture across remote teams • Optimize resource allocation to balance cost and productivity, aligning to the approved roadmap • Vendor & Contractor Management • Coordinate with external staffing vendors or agencies to source and onboard contractors • Manage contracts, renewals, and offboarding processes • Ensure compliance with company policies, legal requirements, and security standards • Ownership and maintenance of technical stack, including security and licensing requirements • Work closely with stakeholders to understand their needs and translate them into technical solutions • Lead research and design efforts and assist in transition to development teams for productization • Work with Product Management to provide level of effort estimates for features being envisioned • Created & Maintains design documentation, master feature lists, etc. • Mentor engineers and perform periodic application architecture reviews with team leads • Assist team leads with code reviews • Work with Managers to create and cultivate software development processes and best practices • Guide and review the architecture in assigned product areas • Review tooling in use and make recommendations to meet goals of delivering high quality secure software • Explore additional technology stacks to help guide strategic expansions to Coalfire’s offerings • Additional responsibilities as assigned Requirements: • Experience managing geographically distributed developer teams • Strong agile software development experience • Effective communication in dynamic, fast-paced situations • Minimum of 10 years’ experience with C#, JavaScript, and agile software development • 5+ years’ secure architecture related experience using modern software engineering processes and tools, such as: • MongoDB • Apache Kafka • Secure cloud computing platform experience • Infrastructure as Code (Terraform) • Container orchestration (EKS) • Serverless architectures (Lambda, API Gateway) • Event-driven architecture, stream processing, and consistency patterns • CI/CD, DevOps, etc. • Docker • Working knowledge of secure coding practices, threat modeling, and compliance frameworks • Performance and scalability optimization • Deadline-oriented, ethical conduct, service orientation, writing coordination, time management, social perceptiveness, monitoring, and active learning are all important skills to this position. • Strong written and verbal communication skills • Preferred: • Bachelor’s or Master’s degree in related field • Experience working to drive threat-focused cybersecurity outcomes for customers via software development • Experience with Azure DevOps, Octopus, and Jira Software • Experience with integrations around the ServiceNow platform • Experience leveraging AI tools in the software development lifecycle to improve quality and efficiency Benefits: • Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options

Develop and execute content strategies aligned with marketing and sales goals, create diverse content types, optimize for SEO, collaborate with experts, and analyze content performance. | Bachelor’s degree, 4-6 years B2B content marketing experience, 1+ year in cybersecurity/technology/compliance content, strong writing/editing, SEO knowledge, and familiarity with AI tools. | Description: • Develop and execute a content strategy aligned with marketing campaigns, sales goals, and industry trends. • Plan and create a wide range of content including blogs, white papers, case studies, guides, checklists, and website copy. • Collaborate with subject matter experts to transform technical insights into accessible, engaging narratives. • Optimize content for SEO to improve organic visibility and engagement. • Partner with the Demand Generation Campaign Manager to provide assets for multi-channel campaigns. • Create sales enablement materials such as one-pagers, customer stories, and presentations. • Track and analyze content performance metrics to measure impact and inform future strategy. • Use AI tools to support research, drafting, editing, and performance optimization. • Ensure all content is consistent with brand voice, tone, and messaging guidelines. Requirements: • Completed Bachelor’s degree from an accredited university, preferably in a related field. • Overall 4–6 years of B2B content marketing or strategy experience . • 1+ year(s) of content writing or related work within the cybersecurity, technology, or compliance sectors. • Strong writing and editing skills with ability to adjust tone for different audiences. • Familiarity with SEO best practices and digital content performance measurement. • Experience working with subject matter experts and cross-functional teams. • Strong organizational skills with the ability to manage multiple priorities and deadlines. • Comfortable using AI and digital tools to improve efficiency and scale content creation. Benefits: • paid parental leave • flexible time off • certification and training reimbursement • digital mental health and wellbeing support memberships • comprehensive insurance options