GCP Cloud Security GRC Consultant - FedRAMP/NIST ATO Expert

Dark Wolf Solutions, LLC; Herndon (VA); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

EOE/AA employer

Job summary

Dark Wolf Solutions, LLC is seeking a Google Cloud Security GRC Consultant to guide RMF/FedRAMP compliance within modern GCP environments. You will translate complex cloud architectures into verifiable evidence to achieve ATO, working with cloud architects and security teams.

The role emphasizes bridging engineering and security, with experience in RMF, eGRC tools, and actionable compliance guidance. Hybrid role based in Herndon, VA, with a competitive salary.

Qualifications

• 2+ years of relevant experience
• At least one Google Cloud Professional Certification
• Experience supporting RMF processes, acting as an ISSO, Security Controls Validator, or performing information assurance engineering
• Hands-on with eGRC tools like eMASS and XACTA
• Ability to clearly communicate complex security concepts to both technical and non-technical stakeholders
• Strong problem-solving skills with a proven ability to quickly learn and apply new technologies
• Familiarity with cloud automation, Infrastructure as Code (e.g., Terraform)
• Understanding of Google Cloud services and technologies
• US Citizenship and clearable up to a Secret Security Clearance

Responsibilities

• Work collaboratively within a fast paced Agile team environment
• Stay up-to-date on the latest Google Cloud services and technologies
• Implement security best practices for Google Cloud solutions
• Serve as a key contributor for federal compliance requirements, including FedRAMP, NIST SP 800-53, and agency-specific security overlays
• Support development and implementation of innovative methods to achieve compliance with government and commercial cybersecurity frameworks
• Conduct detailed technical security control assessments against system components and configurations within the GCP environment, identifying gaps, risks, and recommended mitigations
• Actively contribute to the development and finalization of authorization artifacts
• Partner with cloud architecture and engineering teams to provide actionable compliance guidance, ensuring security is built-in from system design through deployment
• Utilize Google Cloud native tools and features to aid in continuous monitoring (ConMon) activities, vulnerability management, and security posture management
• Support reviews with the Authorizing Official (AO), security assessors (e.g., 3PAOs), and federal agency security teams during control assessments and authorization reviews
• Develop clear, compelling Plan of Action and Milestones (POA&M) entries, helping the team communicate system risks, impact, and mitigation strategies to stakeholders
• Support strategic consulting efforts on evolving federal cloud security policy and best practices

Skills

Google Cloud

FedRAMP

RMF

NIST SP 800-53

eMASS

XACTA

Terraform

Cloud Security

Education

B.S. Information Security

B.S. Computer Science

Tools

eMASS

XACTA

Terraform

Job description

Dark Wolf Solutions, LLC is seeking a Google Cloud Security GRC Consultant to guide RMF/FedRAMP compliance within modern GCP environments. You will translate complex cloud architectures into verifiable evidence to achieve ATO, working with cloud architects and security teams.

The role emphasizes bridging engineering and security, with experience in RMF, eGRC tools, and actionable compliance guidance. Hybrid role based in Herndon, VA, with a competitive salary.