[Remote] Staff Technical Program Manager, Regulated Environments

Note: The job is a remote job and is open to candidates in USA. SailPoint provides identity security for cloud enterprises, helping organizations secure their digital workforce. The Staff Technical Program Manager for Regulated Environments will lead the delivery of new regulated environments on the multi-tenant SaaS platform, focusing on FedRAMP High authorization and ensuring compliance with various regulatory requirements.

Responsibilities

• Lead delivery of new regulated environments on our multi-tenant SaaS platform
• The central engineering program manager leading delivery of our FedRAMP High authorization and standing up the model to sustain it after go-live
• The primary interface between Engineering, Product, and our Compliance team for all matters related to regulated environments
• Embedded with Engineering leaders to own and manage engineering evidence gathering, define sample sets, and support technical decisions in preparation for FedRAMP and future regulated-environment audits
• Accountable for translating compliance requirements into engineering execution plans, control implementation milestones, and audit-ready evidence pipelines—built once and reused across regimes
• Conduct 1:1s with key stakeholders across Engineering, Cybersecurity, Product Ops, and our Compliance organization to map the landscape
• Review and ratify a gap analysis of our FedRAMP Moderate posture, focusing on SDLC and FIPS compliance gaps that pose immediate risk
• Audit current Jira boards, the POA&M, and in-flight initiatives to gauge engineering velocity and capacity
• Work closely with our Product leadership to inventory all in-scope future regulated environments and catalog their data-residency and sovereignty requirements at a high level
• Get current on evolving FedRAMP PMO guidance and what it means for our authorization path
• Finalize the approach, ownership, and sequencing for the highest-impact items with our internal leads
• Design the control and evidence framework and governance to be reusable across regimes from day one (a control crosswalk), so FedRAMP work compounds toward regulated environments rather than being one-off
• Work with our Compliance team to stand up Significant Change / release-management governance to prevent compliance drift
• Deliver leadership a realistic, data-backed timeline and resource plan, including where regulated-environment work will force roadmap trade-offs
• Partner with Compliance to frame engineering-scoped SSP documentation and readiness milestones
• Establish a monthly attestation and progress report for engineering executive leadership
• Track high-priority technical controls and serve as the primary engineering escalation point for blockers
• Ensure engineering scoped SSP and all attachments (policies, procedures, contingency plans) are fully drafted and aligned with the implemented environment
• Coordinate engineering teams' readiness/mock assessment with our third-party assessment organization (3PAO) to surface lingering high-risk gaps before the formal audit
• Validate that all product and feature flags are accurately mapped in production to prevent compliance drift
• Work with our Product Leadership to deliver a requirements assessment and delivery roadmap for EU sovereign cloud and UAE data-residency obligations, including architecture and data-residency gaps and proposed sequencing
• Achieve FedRAMP High authorization, establish an engineering org scoped Continuous Monitoring (ConMon) model, and transition operational ownership to the sustainment team
• Begin delivery of the next regulated environment on the roadmap using the established control framework, evidence pipeline, and governance model

Skills

• 5+ years of experience in Technical Program Management in a SaaS or cloud-native company
• 3+ years of direct, hands-on experience leading FedRAMP authorization programs (FedRAMP Moderate required; proven implementation and operationalization of FedRAMP High controls in a SaaS environment strongly preferred)
• Direct experience with cloud computing (AWS, Azure) and the end-to-end SDLC from a compliance perspective
• Proven experience with compliance evidence collection, documentation, and audit support
• Experience working with agile development methodologies
• Strong written and verbal communication skills and the ability to work collaboratively with stakeholders and development teams
• Expert knowledge of JIRA, SharePoint, and Confluence
• Bachelor's degree in Business, MIS, Computer Science, or a related field, or equivalent professional experience
• Experience leading a program to a successful FedRAMP High 'Ready' or 'In-Process' designation
• Led at least one SaaS product through FedRAMP High authorization (Ready, In Process, or ATO)
• Familiarity with data-residency and sovereignty architectures, and exposure to international regulated-environment regimes such as EU sovereignty schemes / GDPR and data-protection regimes such as PDPL
• Good understanding of cloud providers (AWS, Azure, Google) and related technologies, monitoring, and enablement practices
• Experience with other compliance certifications such as SOC and ISO
• Agile/Scrum training or certification

Benefits

• SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation
• Health and wellness coverage: Medical, dental, and vision insurance
• Disability coverage: Short-term and long-term disability
• Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
• Additional life coverage options: Supplemental life insurance for employees, spouses, and children
• Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
• Financial security: 401(k) Savings and Investment Plan with company matching
• Time off benefits: Flexible vacation policy
• Holidays: 8 paid holidays annually
• Sick leave
• Parental support: Paid parental leave
• Employee Assistance Program (EAP) and Care Counselors
• Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
• Health Savings Account (HSA) with employer contribution

Company Overview