FedRAMP Assessment Consultant – Cloud Security & Compliance

Remote; San Francisco (CA); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible work model

Parental leave

Certification reimbursement

Mental health support

Comprehensive insurance

Job summary

Coalfire is seeking a technically strong, self-starter Consultant to join our FedRAMP Assessment team. You will analyze configuration files, logs, and artifacts to validate control implementations, research unfamiliar technologies, and collaborate with client engineers to ensure alignment with FedRAMP and NIST controls.

You will lead interviews, draft observations, and help prepare assessment reports while growing toward FedRAMP Assessor responsibilities.

Qualifications

• Minimum 2-3 years of experience in a technical IT role (e.g., systems or network administration, infrastructure engineering, security engineering, or security operations)
• Demonstrated ability to read and interpret technical artifacts at a detailed level
• Self-starter who researches configurations and vendor documentation
• Strong understanding of networking fundamentals (TCP/IP, subnetting, routing, VLANs)
• Working knowledge of common infrastructure services and how they are secured (DNS, NTP, LDAP, authentication, MFA, SSH, TLS)
• Experience with infrastructure as code and reading IaC templates
• Experience with CI/CD pipelines and code review processes
• Scripting experience (Python, PowerShell, Bash)
• Ability to read firewall rulesets and network diagrams
• Travel up to 20%
• Bachelor's degree in IT or related field
• Hold networking, systems, or cloud security focused certifications (Bonus points)

Responsibilities

• Collaborate with assessors on federal compliance assessments (FedRAMP, NIST 800-171, FISMA)
• Review artifacts (config files, logs, outputs) for control implementation
• Review IaC templates and deployment scripts to validate baselines
• Use scripting to parse large artifact sets
• Research unfamiliar technologies using vendor docs and guides
• Analyze network traffic flow and implementation of services
• Assess artifacts for scope and completeness
• Draft audit observations addressing regulatory objectives
• Lead interview walkthroughs with client engineers
• Prepare and review assessment reports
• Develop toward FedRAMP Assessor responsibilities
• Educate clients on compliance activities
• Manage priorities to meet delivery targets
• Ensure quality per Coalfire standards
• Maintain certifications and industry knowledge
• Collaborate with project and quality management teams
• Build client relationships and identify upsell opportunities

Skills

Networking fundamentals

Linux & Windows

Infrastructure as code

CI/CD pipelines

Scripting (Python/PowerShell/Bash)

Artifact review & evidence gathering

Technical research

Communication skills

Time management

Consulting skills

Education

Bachelor's degree in IT or related field

Tools

Terraform

CloudFormation

Ansible

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Job description

Coalfire is seeking a technically strong, self-starter Consultant to join our FedRAMP Assessment team. You will analyze configuration files, logs, and artifacts to validate control implementations, research unfamiliar technologies, and collaborate with client engineers to ensure alignment with FedRAMP and NIST controls.

You will lead interviews, draft observations, and help prepare assessment reports while growing toward FedRAMP Assessor responsibilities.