FedRAMP ATO Lead & Security Assessor

imagineeer LLC; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Imagineeer is seeking a Security Assessor/ATO Lead to assess FedRAMP packages and prepare agency authorization packages for pilot tools in a federal civilian department. You will own the security readiness checkpoint in the firm's decision methodology.

The role requires 10+ years in information security, FedRAMP 3PAO experience, and deep knowledge of NIST RMF (SP 800-37) and SP 800-53. You will lead the Security Analyst and ensure CUI handling compliance in contractor engagements.

Qualifications

• Bachelor's degree in cybersecurity, computer science, or a related field.
• 10+ years of information security experience, including leading federal security assessments and ATO efforts.
• Experience as a FedRAMP 3PAO assessor or equivalent depth in FedRAMP package review.
• Expert knowledge of NIST RMF (SP 800-37) and SP 800-53.
• Ability to pass the client's contractor security vetting and obtain/maintain a PIV credential; may carry higher position risk.
• Experience with the contractor sandbox in FedRAMP-authorized cloud regions and mock interfaces.

Responsibilities

• Define security requirements for candidate tools and the pilot environment.
• Assess candidate vendors' FedRAMP packages, including SSP, SAR, POA&M, and inherited controls.
• Prepare the agency authorization package for each piloted tool and complete an integration security review.
• Support agency security reviews of the contractor sandbox.
• Ensure the team meets the client's security requirements for contractors, including CUI handling under 32 CFR Part 2002 and NIST SP 800-171.
• Own authorization timing risk and validate security content in every deliverable.
• Lead the Security Analyst.
• Manage sandbox in FedRAMP-authorized cloud region with synthetic data.

Skills

FedRAMP

NIST RMF SP 800-37

NIST SP 800-53

3PAO Lead Assessor experience

Public Trust clearance readiness

CUI handling under 32 CFR Part 2002

Security assessments leadership

Education

Bachelor's degree in cybersecurity / CS / related field

Job description

Imagineeer is seeking a Security Assessor/ATO Lead to assess FedRAMP packages and prepare agency authorization packages for pilot tools in a federal civilian department. You will own the security readiness checkpoint in the firm's decision methodology.

The role requires 10+ years in information security, FedRAMP 3PAO experience, and deep knowledge of NIST RMF (SP 800-37) and SP 800-53. You will lead the Security Analyst and ensure CUI handling compliance in contractor engagements.