Policy-as-Code Specialist

ELDR Technology's Policy-as-Code practice develops the bridge between governance documentation and automated compliance enforcement. This role translates regulatory requirements into structured, version-controlled policy artifacts that can be consumed by security tooling, CI/CD pipelines, and compliance automation platforms.

• —Translate regulatory requirements (NIST, FedRAMP, ISO 27001) into structured policy-as-code frameworks
• —Develop and maintain machine-readable policy artifacts using OPA, Rego, OSCAL, or equivalent
• —Document policy-as-code architectures, implementation guides, and governance frameworks
• —Support compliance automation tooling integration and continuous compliance monitoring documentation
• —Bridge regulatory documentation teams and engineering automation teams

• —4–8 years in DevSecOps, compliance automation, or regulatory technology
• —Experience with OPA/Rego, OSCAL, or other policy-as-code frameworks
• —Understanding of NIST 800-53, FedRAMP, or STIG control requirements
• —Strong technical writing capability for developer and compliance audiences simultaneously

• —Federal government or cloud service provider background
• —Experience with Terraform, Ansible, or infrastructure-as-code security
• —OSCAL implementation experience

• —Frontier practice area with growing institutional demand
• —Remote engagement model
• —Competitive compensation