Technical FedRAMP Assessment Specialist

Coalfire; Oregon; Hybrid; USD 80,000 - 134,000; Full time

Benefits offered by this job

Flexible work model

Certification & training reimbursement

Competitive benefits & paid parental/p

Travel opportunities up to 20%

Job summary

Coalfire is seeking a technically strong Consultant to join the FedRAMP Assessment team. You will analyze artifacts, review IaC configurations, and perform vulnerability and control testing under mentorship.

The role involves independent research, client interviews, and drafting audit observations to improve security posture. The position offers a flexible work model, travel up to 20%, and opportunities to grow toward FedRAMP Assessor responsibilities while collaborating with a multidisciplinary

Qualifications

• Minimum 2-3 years in a technical IT role.
• Ability to read and interpret artifacts in detail (configs, logs, outputs).
• Independently research configurations and vendor docs.
• Strong networking fundamentals (TCP/IP, subnetting, VLANs, NAT).
• Knowledge of infrastructure services and security (DNS, NTP, LDAP, MFA, TLS).
• Experience with IaC and CI/CD pipelines; scripting proficiency.
• Read firewall rulesets and data flow diagrams; assess vulnerability scans.
• Familiarity with NIST 800-37/53/53A; ability to research testing approaches.

Responsibilities

• Collaborate with assessors on federal compliance assessments (FedRAMP, NIST 800-171, FISMA).
• Review artifacts (configs, logs, scans) to demonstrate control implementations.
• Validate IaC templates to ensure secure baselines and change control.
• Parse large artifact sets with scripting to support control testing.
• Research unfamiliar technologies and document how they satisfy controls.
• Lead interviews and technical walkthroughs with client engineers.
• Draft audit observations and assessment reports.
• Develop toward FedRAMP Assessor responsibilities under mentorship.
• Manage priorities to meet project deliverables.

Skills

Technical reading artifacts

Networking fundamentals

Linux/Windows administration

IaC (Terraform, CloudFormation, Anible

CI/CD tooling (GitHub Actions, GitLab,

Scripting (Python, PowerShell, Bash)

NIST 800-37/800-53/800-53A knowledge

FedRAMP knowledge

Artiffacts review & evidence gathering

Interview facilitation

Vendor documentation research

Communication to non-technical

Education

Bachelor's degree in IT or related field

Tools

Terraform

CloudFormation

Ansible

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Nessus or vulnerability scanners

FedRAMP/FISMA/NIST frameworks

Job description

Coalfire is seeking a technically strong Consultant to join the FedRAMP Assessment team. You will analyze artifacts, review IaC configurations, and perform vulnerability and control testing under mentorship.

The role involves independent research, client interviews, and drafting audit observations to improve security posture. The position offers a flexible work model, travel up to 20%, and opportunities to grow toward FedRAMP Assessor responsibilities while collaborating with a multidisciplinary