Remote FedRAMP Security Engineer: Own the Authorization

Maestro Search; United States; On-site; USD 130,000 - 160,000; Full time

Job summary

Maestro Search is seeking a FedRAMP Security Engineer for a remote role in the United States. The successful candidate will own the end-to-end authorization process, maintain the security posture of the cloud boundary, and drive the FedRAMP 20x initiative with automated evidence collection.

You will collaborate with engineering teams to translate 800-53 controls into implemented configurations and manage continuous monitoring activities including monthly scanning and deviation/change requests.

Qualifications

• Hands-on assessment experience against NIST 800-53 and 800-53A, gained at a 3PAO or on the CSP side.
• FedRAMP delivery experience, a completed authorization or multiple assessments behind you.
• Deep technical cloud security knowledge with AWS preferred (Azure or GCP considered).
• CISSP plus a main AWS security certification.
• US person (citizen or green card holder).

Responsibilities

• Own the end-to-end authorization package; SSP, POA&M and supporting artifacts.
• Maintain the technical security posture of the cloud environment carrying the boundary.
• ConMon post-authorization: monthly scanning, deviation requests, significant change requests, annual assessment.
• Move to FedRAMP 20x with automated evidence collection and key security indicators.
• Work with engineering teams to implement 800-53 controls in configurations.
• Review cloud architecture and hardening decisions against the boundary.

Skills

FedRAMP

NIST 800-53

Cloud security

AWS security

CISSP

US person

Job description

Maestro Search is seeking a FedRAMP Security Engineer for a remote role in the United States. The successful candidate will own the end-to-end authorization process, maintain the security posture of the cloud boundary, and drive the FedRAMP 20x initiative with automated evidence collection.

You will collaborate with engineering teams to translate 800-53 controls into implemented configurations and manage continuous monitoring activities including monthly scanning and deviation/change requests.