Remote Cloud Security Architect (RMF/FedRAMP)

Cyberjobs; Bethesda (MD); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Bonus programs

Health insurance

401(k) plan

Life insurance

Disability insurance

PTO

Parental leave

Training and development

Remote work opportunities

Wellness resources

Job summary

Cyberjobs in the United States seeks a Cloud Security Architect to support the CISO on a centralized services contract for an HHS client. You will manage ATO processes across AWS, GCP, and Azure and ensure controls are inherited and deployed prior to service delivery.

You will collaborate with CISOs, Authorizing Officials, ISSOs, assessors, cloud engineers, and customer leads to review architectures, write security architecture decisions, and maintain SSPs and SARs under RMF and FedRAMP

Qualifications

• Bachelor's degree in information security, computer science, or a related field.
• 6 years of information security experience, including 3 years on federal ATO packages under the NIST RMF.
• Authored SSPs, SARs, and POA&Ms that an Authorizing Official accepted.
• Working knowledge of the NIST SP 800-53 Rev. 5 control families and of common and inherited controls.
• Hands-on security architecture experience in at least one of AWS, GCP, or Azure in federal environments, and working knowledge of the other two.
• Experience with FedRAMP authorized services, FedRAMP baselines, and customer responsibility matrices.
• Experience running threat models and architecture reviews with engineers.
• Written and spoken communication with CISOs, Authorizing Officials, assessors, and engineers.
• One of the following certifications: CISSP, CCSP, or CISM.
• Eligible to work in the United States.

Responsibilities

• CISO support and ATO management (RMF).
• Prepares SSPs, SARs, POA&M, and authorization decision packages.
• Keeps one schedule and one status report for every environment.
• Directs continuous monitoring: annual assessments and POA&M closure.
• Briefs the CISO and Authorizing Officials on status and risks.
• Aligns packages to FISMA, NIST SP 800-37 Rev. 2, 800-53 Rev. 5, and FedRAMP baselines.
• Coordinates assessors, ISSOs, system owners, and engineers.

Job description

Cyberjobs in the United States seeks a Cloud Security Architect to support the CISO on a centralized services contract for an HHS client. You will manage ATO processes across AWS, GCP, and Azure and ensure controls are inherited and deployed prior to service delivery.

You will collaborate with CISOs, Authorizing Officials, ISSOs, assessors, cloud engineers, and customer leads to review architectures, write security architecture decisions, and maintain SSPs and SARs under RMF and FedRAMP