GRC Engineer

Responsibilities

• Own the full development lifecycle for AI agents designed to automate evidence collection, evaluation, and continuous monitoring.
• Develop programmatic methods to extract evidence from source systems (AWS, GCP, GitHub) to replace traditional annual audits with automated assurance.
• Serve as the technical lead for GRC SaaS integrations, ensuring platforms scale with data needs.
• Build and maintain integration layers, such as MCP servers and APIs, to connect GRC tools with internal ecosystems like Jira and BigQuery.
• Support compliance efforts for FedRAMP, ISO 27001, and SOC 2 by translating domain expertise into automated agent logic.
• Assist with traditional GRC tasks including policy authoring, change management, and manual controls enforcement when necessary.

Requirements

• 5+ years of software engineering experience.
• Experience building AI/ML-powered applications or agentic systems.
• Proficiency in Python and experience with API integrations and data processing.
• Familiarity with at least one compliance framework (FedRAMP, ISO 27001, SOC 2, or NIST).
• Experience with Git, CI/CD, and deploying production-grade services.

Preferred Qualifications

• Experience with the Anthropic Claude API, Model Context Protocol (MCP), or Claude Agent SDK.
• Experience extracting data from cloud infrastructure (AWS, GCP) or security tooling (SIEM, vulnerability scanners).
• Familiarity with GRC platforms (LogicGate, ServiceNow) or compliance data models.
• Experience with OSCAL (Open Security Controls Assessment Language).
• Background working in highly regulated environments such as FinTech, GovCloud, or Healthcare.

About the Company

ID.me is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. With over 152 million users, ID.me provides streamlined identity verification for 20 federal agencies, 45 state government agencies, and over 70 healthcare organizations. We are committed to the mission of "No Identity Left Behind," ensuring everyone has access to a secure digital identity.