RMF Cloud Security Architect FedRAMP & ATO Expert (Remote)

Northramp LLC; Bethesda (MD); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Employee Bonus Programs

Medical, Dental, and Vision Insurance

401(k) Retirement Plan

Basic Life, Voluntary Life, and AD&D

Short-Term and Long-Term Disability

Paid Time Off

Paid Parental Leave

Training and Professional Development

Remote Work Opportunities

Wellness Resources

Job summary

Northramp LLC is seeking a Cloud Security Architect to support the CISO for a centralized HHS contract. The role oversees ATO under RMF, maintains controls inherited by customer environments across AWS, GCP, and Azure, and reviews security architecture before deployment.

You will collaborate with CISO, officials, ISSOs, assessors, cloud engineers, and customer leads; produce SSPs, SARs, POA&Ms; and ensure alignment with FedRAMP and NIST guidelines.

Qualifications

• Bachelor's degree in information security, computer science, or related field, or equivalent experience.
• 6 years of information security experience, including 3 years on federal ATO packages under the NIST RMF.
• Authored SSPs, SARs, and POA&Ms accepted by Authorizing Officials.
• Working knowledge of NIST SP 800-53 Rev. 5 and common/inherited controls.
• Hands-on security architecture in AWS, GCP, or Azure in federal environments.
• Experience with FedRAMP authorization, baselines, and customer matrices.
• Certifications: CISSP, CCSP, or CISM.
• Eligible to work in the United States.

Responsibilities

• Supports CISO and ATO management (RMF) for broker and customer environments.
• Prepares SSPs, SARs, POA&Ms, and authorization decision packages.
• Maintains schedules and status reports for every environment in authorization.
• Directs continuous monitoring: annual assessments and risk reviews.
• Briefs CISO and officials on status, risks, and risk acceptance.
• Aligns packages to FISMA, NIST, FIPS, and FedRAMP baselines.
• Coordinates assessors, ISSOs, system owners, and engineers.
• Defines and maintains catalogs of inherited controls and evidence templates.

Skills

RMF ATO

CISSP/CCSP/CISM

Cloud architectures

FedRAMP

Education

Bachelor's degree in information security or related

Tools

AWS

Azure

GCP

Job description

Northramp LLC is seeking a Cloud Security Architect to support the CISO for a centralized HHS contract. The role oversees ATO under RMF, maintains controls inherited by customer environments across AWS, GCP, and Azure, and reviews security architecture before deployment.

You will collaborate with CISO, officials, ISSOs, assessors, cloud engineers, and customer leads; produce SSPs, SARs, POA&Ms; and ensure alignment with FedRAMP and NIST guidelines.