Senior Cloud Security Assessor—FedRAMP & Cloud Risk Expert

Sprymethods; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Spry Methods is seeking an experienced Senior Cloud Security Assessor to join our team in the Washington, DC area. The successful candidate will conduct independent security control assessments of cloud and hybrid systems, with strong emphasis on federal cloud environments.

You will lead full-cycle SA&A activities, assess Azure and AWS security controls, review FedRAMP packages, and develop SAPs, SARs, RARs, and POA&Ms. Exceptional analytical skills and clear communication are essential.

Qualifications

• CISSP or equal certification required.
• Eight+ years of hands-on security control assessments.
• Experience with federal cloud environments (Azure/AWS) and FedRAMP.
• Strong knowledge of RMF and NIST control assessment practices.
• Ability to analyze large volumes of evidence and draw clear conclusions.

Responsibilities

• Lead full-cycle SA&A activities for cloud, hybrid, and enterprise systems as an independent assessor.
• Assess Azure and AWS environments including security controls and operating effectiveness.
• Review FedRAMP packages and supporting documentation for applicability and gaps.
• Analyze assessment artifacts such as SSPs, policies, diagrams, inventories, logs, and test outputs.
• Develop SAPs, SARs, RARs, Evidence Lists, and POA&Ms.
• Perform testing from admin, operational, and technical perspectives.
• Interpret vulnerability scans and distinguish true findings from false positives.
• Communicate findings, risk, root cause, and mitigations to stakeholders.
• Coordinate evidence requests and assessment schedules with customer personnel.
• Support program operations and contribute to consistent assessment methods.

Skills

CISSP certification

Independent assessor experience

FedRAMP knowledge

RMF & NIST practices

Azure & AWS cloud security

Security control testing

Security artifacts analysis

Strong written communication

Data/context-driven assessment

Education

Bachelor's degree in cybersecurity, IT, CS or related field

Eight years of relevant specialized experience

Job description

Spry Methods is seeking an experienced Senior Cloud Security Assessor to join our team in the Washington, DC area. The successful candidate will conduct independent security control assessments of cloud and hybrid systems, with strong emphasis on federal cloud environments.

You will lead full-cycle SA&A activities, assess Azure and AWS security controls, review FedRAMP packages, and develop SAPs, SARs, RARs, and POA&Ms. Exceptional analytical skills and clear communication are essential.