Senior Federal IT Auditor: FedRAMP & DoD IL4/IL5 Expert

Tanium; Bellevue (WA); Hybrid; USD 100,000 - 155,000; Full time

Job summary

Tanium is seeking a GRC professional with FedRAMP and DoD IL4/IL5 experience to support cloud authorization, continuous monitoring, and control implementation across civilian and defense environments. You will work with engineering, security, and product teams to develop authorization packages (SSP/POA&M), coordinate evidence collection, and prepare for 3PAO assessments and agency reviews.

This hybrid role requires in-person attendance several days weekly in Bellevue, WA, or other listed U.S.

Qualifications

• 5+ years in information security, compliance, or risk management with federal program exposure.
• 5+ years hands-on FedRAMP experience (CSP compliance, 3PAO assessment support, or federal agency ISSO activities).
• Strong written and verbal communication across technical and non-technical audiences.
• Certifications preferred: CISSP, CISA, CAP, Security+, or equivalent.

Responsibilities

• Contribute to authorization package documentation (SSPs, POA&Ms, SAPs), with attention to FedRAMP High baseline requirements.
• Coordinate with 3PAOs and federal agency sponsors on scheduling, evidence collection, and artifact prep for FedRAMP and DoD IL4/IL5 assessments; respond to assessor inquiries.
• Implement and document NIST SP 800‑53 controls, validating effectiveness and gathering evidence across FedRAMP Moderate, High, and DoD IL4/IL5 boundaries.
• Execute continuous monitoring: monthly vulnerability scanning reviews, POA&Ms tracking, and deliverables for sponsoring agencies and DoD stakeholders, including annual assessment support.
• Assess system architectures with cloud/infrastructure teams to identify compliance gaps, and conduct gap analyses/readiness assessments ahead of 3PAO assessments.
• Develop and improve FedRAMP policies, procedures, control implementation descriptions, and internal documentation standards, aligned with PMO and DoD SRG guidance.
• Review and respond to federal customer security questionnaires and due diligence requests.
• Prepare compliance status summaries, POA&M updates, and control assessment findings for senior leadership.
• Monitor FedRAMP PMO, NIST, and DoD SRG updates and federal cybersecurity directives, flagging relevant changes to the GRC team.
• Participate in cross-functional projects integrating FedRAMP High and DoD IL4/IL5 requirements into product development.
• Working knowledge of NIST SP 800‑53 (Rev 4/5) High baseline controls and their practical application in cloud environments.

Skills

FedRAMP experience

3PAO coordination

NIST SP 800-53

DoD IL4/IL5

Cloud security

Job description

Tanium is seeking a GRC professional with FedRAMP and DoD IL4/IL5 experience to support cloud authorization, continuous monitoring, and control implementation across civilian and defense environments. You will work with engineering, security, and product teams to develop authorization packages (SSP/POA&M), coordinate evidence collection, and prepare for 3PAO assessments and agency reviews.

This hybrid role requires in-person attendance several days weekly in Bellevue, WA, or other listed U.S.