FedRAMP Security Consultant

Job Summary

To support cloud service providers in achieving FedRAMP authorization, the contracted FedRAMP Security Consultant will conduct readiness assessments, gap analyses, and develop necessary security documentation while working remotely.

Key responsibilities:

• Lead FedRAMP readiness and advisory engagements, assessing control gaps and developing remediation roadmaps
• Perform gap assessments and control analysis to evaluate security programs against FedRAMP requirements
• Develop key FedRAMP artifacts, including System Security Plans (SSP) and POA&Ms, required for authorization

Required qualifications:

• 5+ years in cybersecurity, compliance, or risk assessment roles with experience in structured security engagements
• 2-3 years working with NIST-based frameworks, particularly NIST SP 800-53 and FedRAMP
• Hands-on experience with FedRAMP or NIST SP 800-53 initiatives, including readiness assessments and documentation development
• Familiarity with AWS, Azure, or GCP environments and security best practices
• Relevant certifications such as CISSP, CISA, CISM, or CCSP