Remote Grc Analyst Jobs in Virginia (NOW HIRING)

Sentinel Blue is hiring a Client Engineer for our Operations team. This role is a senior, client-facing engineer who serves as a trusted technology advisor across Sentinel Blue's client portfolio. This role sits within the Operations team and is built for an engineer who can operate at both the strategic and technical level. The perfect candidate is someone who can assess a client's environment, understand their goals and constraints, and provide clear, actionable direction.

This is not a pure advisory role. You will be reviewing and modifying configurations, evaluating vendor proposals, identifying security and compliance implications, and producing documentation clients can act on. You will also collaborate internally to connect client needs to the right delivery teams or external partners.

This is a full-time position that is fully remote.

This position may require access to technology, technical data, or information that is subject to U.S. export control laws and regulations. Employment in this position is contingent upon either verification of U.S. person status as defined under applicable export control regulations (which includes U.S. citizens, lawful permanent residents, and certain protected individuals such as refugees and asylees) or the ability to obtain any required export authorization. The company reserves the right not to apply for an export license and to decline to proceed with any applicant on that basis. All qualified applicants will receive consideration for employment without regard to citizenship status, national origin, or immigration status.

A day in the Client Engineer role:

You might open a conversation with a client who wants to evaluate a new business intelligence platform. You'll work through what they're trying to accomplish, assess the hosting and infrastructure implications, identify where it touches identity or compliance, and produce a structured recommendation even if Sentinel Blue won't own the full implementation. That same week, you might be standing up the server infrastructure to host it, working through a configuration issue blocking a data connection, or troubleshooting why an integration with their identity provider isn't behaving as expected. Later, you're on a call reviewing a vendor proposal with a client's leadership team, helping them understand what questions to ask and what commitments to require. By end of day, you're translating that conversation into a written brief the client can take into their next board discussion.

Responsibilities:

• Serve as the senior technology point of contact for assigned clients, owning the relationship at the strategic level.
• Lead discovery conversations to understand client business goals, existing technology investments, and emerging needs.
• Translate complex technical topics into clear guidance appropriate for non-technical stakeholders and executive audiences.
• Represent Sentinel Blue on client calls with credibility, clarity, and a consultative approach.
• Engage clients on technology requests and questions that fall outside standard managed service scope, including specialized platforms, line-of-business applications, and bespoke infrastructure needs.
• Assess unfamiliar systems and platforms quickly, understanding hosting requirements, integration dependencies, security posture, and compliance implications even without deep prior experience with the specific tool.
• Deploy, configure, and troubleshoot infrastructure and applications as part of client engagements, including standing up servers, modifying system configurations, and resolving application-level issues.
• Provide guidance aligned with CMMC, NIST 800-171, and CIS Controls as applicable to client context.
• Identify gaps, risks, and remediation priorities across client environments and communicate them clearly.
• Help clients evaluate vendor proposals and technology investments, including RFP support, contract review from a technical lens, and total cost of ownership analysis.
• Assess vendor security posture, SLA commitments, and integration readiness in the context of the client's environment.
• Produce clear client-facing deliverables including assessments, roadmaps, briefing documents, and recommendation reports.
• Collaborate with internal IT Operations, SOC, and GRC teams to route client needs to the right delivery function.
• Contribute to internal knowledge by documenting patterns, assessments, and guidance for recurring client scenarios.

What We Can Offer:

Sentinel Blue is a young company with a focused mission: We're bringing enterprise-class cybersecurity to small and medium sized businesses. Frankly, we're pushing the envelope of how things are done and constantly seeking innovative ways to meet that mission. The pace is fast, and we're always learning new things. This is a great place if you want to expose yourself to new and emerging technologies, want to be challenged, and want to build your skills. Further, success in this role can quickly transition into a senior engineering, architectural, or technical leadership role. The right person will find themselves in a fun, dynamic environment, working on interesting problems and making a real difference.

You will be required to achieve a Security+ certification in the first 6 months of hire; we'll cover your certification costs and provide paid time for you to study!

Requirements:

• 5-8 years of relevant experience in cloud infrastructure, IT consulting, or technology advisory roles with demonstrated client-facing ownership.
• Strong working knowledge of Microsoft 365, Azure, Entra ID, and modern identity and endpoint management.
• Demonstrated ability to assess unfamiliar technology platforms and produce actionable recommendations without requiring end-to-end ownership of the system.
• Excellent written and verbal communication skills, including the ability to brief executive and non-technical audiences clearly and confidently.
• Troubleshooting skills and follow-through, including validation and documentation.
• Experience engaging with compliance frameworks such as CMMC, NIST 800-171, or CIS Controls in a practical engineering or advisory context.
• CompTIA Security+ required within 6 months of hire if not already held.

Desired Qualifications:

• MSP, MSSP, or consulting background with responsibility across multiple client environments.
• Hands-on experience in Azure Government, Microsoft 365 GCC High, or other FedRAMP Moderate environments.
• Familiarity with vendor evaluation, RFP processes, and technology procurement advisory.
• Experience assessing line-of-business or specialized applications (e.g., BI platforms, ERP/CRM systems, industry-specific tools) from an infrastructure, security, or compliance lens.
• Proficiency in core networking fundamentals and practical exposure to platforms such as Fortinet, Meraki, Ubiquiti UniFi, or Cloudflare Zero Trust.
• Familiarity with backup, recovery, and data retention concepts in cloud environments.
• Bachelor's or Master's degree in Cybersecurity, Information Systems, Computer Science, Business, or a related field.

Benefits:

• Fully paid individual healthcare, vision and dental insurance for the employee.
• Paid certification and training opportunities.
• Three weeks of paid vacation + 10 paid holidays.
• A supportive environment with a focus on keeping healthy work-life balance.
• Retirement benefit (401k) with company match