Senior FedRAMP & Cloud Security Advisor

Fortreum; Leesburg (VA); On-site; USD 150,000 - 193,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K match

Disability insurance

Life insurance

Flexible time off

Training stipends

Certification reimbursements

Online training access

Job summary

Fortreum is seeking a Senior Consultant, FedRAMP 20x Advisory to lead project evaluations of client compliance against regulatory standards. You’ll design solutions mapped to KSIs, implement automated validation, and produce client-ready reports and documentation.

This customer-facing role requires strong collaboration with clients, hands-on architectural work, and ongoing professional development in certifications and cloud engineering skills.

Qualifications

• Bachelor’s Degree or equivalent job experience.
• 6+ years of professional services experience.
• 4+ year of FedRAMP experience or cloud security engineering experience.
• Working knowledge of FedRAMP 20x KSIs.
• Comfort using AI tools to interpret and organize regulatory requirements.
• Active GitHub or portfolio showing coding/cloud automation work.
• Proficient in Microsoft 365 product suite.
• Ability to be self-directed with little oversight.
• Ability to quickly assess new and leading-edge technologies and concepts.
• Ability to develop and maintain strong relationships with team members and clients.
• Comfortable supporting fast-paced team environments.
• Strong technical acumen with regards to cloud security.

Responsibilities

• Deliver gap analysis and detailed program recommendations for clients pursuing a regulatory or compliance milestone.
• Prepare for FedRAMP 20x Vulnerability Detection & Response (VDR).
• Advise on FIPS 140-2 / 140-3 Encryption.
• Develop & Maintain FedRAMP Authorization Boundary Diagram.
• Optimize Management Plane Tooling (SIEM, Vulnerability Management, etc.).
• Develop documentation such as a Security Decision Record (SDR) and Certification Package Overview (CPO).
• Design and implement client solutions mapped to FedRAMP 20x KSIs, translating outcome-based requirements into technical architecture.
• Build and support automated, code-based validation methods (scripts, APIs, IaC).
• Track FedRAMP 20x releases and Change Requests (e.g., CR26).
• Use AI/ML tools to catalog Key Security Indicators.
• Advise CSPs on generating machine-readable visibility into compliance data.
• Establishes and maintain positive collaborative relationships with clients and stakeholders.
• Advises clients on compliance activities and their desired outcomes.
• Leads project activities including preparation, review of documentation, and client interviews.
• Ensures quality products and services are delivered on time and within hours.
• Continuous professional development in pursuing industry certifications.
• Escalates client and project issues to management.
• Provides mentorship to team members.
• Interfaces with clients throughout engagement across levels.

Skills

FedRAMP KSIs

AI tools

GitHub portfolio

Microsoft 365

Self-directed

Cloud security

Fast-paced team

Education

Bachelor’s degree

Tools

Terraform

Automation scripts

Job description

Fortreum is seeking a Senior Consultant, FedRAMP 20x Advisory to lead project evaluations of client compliance against regulatory standards. You’ll design solutions mapped to KSIs, implement automated validation, and produce client-ready reports and documentation.

This customer-facing role requires strong collaboration with clients, hands-on architectural work, and ongoing professional development in certifications and cloud engineering skills.