FedRAMP-HIPAA Security Compliance Lead

Concept Plus, LLC; Fairfax (VA); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off

11 paid holidays

Tuition reimbursement

Unlimited training

Job summary

Concept Plus is seeking a Security Compliance (ATO) Specialist to ensure the client OCI/ExaCC and Cloudflare solutions meet FedRAMP High, NIST 800-53 r5, and HIPAA requirements, and supports continuous Authorization to Operate (cATO) processes across the program.

Map solution designs to controls, support control assessments, advise on compliant-by-design patterns, review IaC, and assist with evidence collection and client security requirements.

Qualifications

• Deep knowledge of FedRAMP High and NIST 800-53 r5.
• Experience with ATO / continuous ATO processes in federal environments.
• Cloud security assessment experience (OCI, AWS, or Azure).
• Familiarity with HIPAA and healthcare data protection.
• Ability to translate controls into actionable engineering guidance.
• 7+ years information security/compliance with 3+ years supporting federal ATO.
• Must satisfy client security requirements and obtain/maintain applicable client background investigation and clearance.

Responsibilities

• Map solution designs and configurations to FedRAMP High and NIST 800-53 r5 controls.
• Support continuous ATO activities: control assessment, POA&M management, and evidence collection.
• Advise architecture and engineering teams on compliant-by-design patterns and guardrails.
• Review IaC and cloud configurations for security control coverage.
• Support HIPAA and client security requirements and Section 508 compliance of deliverables.

Skills

FedRAMP High

NIST 800-53 r5

ATO / continuous ATO

Cloud security assessment

HIPAA compliance

Engineering guidance

Background investigation

7+ years info security

Tools

GRC tooling

Cloud Guard

Job description

Concept Plus is seeking a Security Compliance (ATO) Specialist to ensure the client OCI/ExaCC and Cloudflare solutions meet FedRAMP High, NIST 800-53 r5, and HIPAA requirements, and supports continuous Authorization to Operate (cATO) processes across the program.

Map solution designs to controls, support control assessments, advise on compliant-by-design patterns, review IaC, and assist with evidence collection and client security requirements.