Federal Security Consultant
On-siteWashington, District of Columbia, United States or Washington, United States
Job Summary
Lead the planning and execution of FedRAMP ATO activities for SAP Concur and aligned SaaS platforms within the Go.gov modernization program. Develop, review, and maintain system security documentation including SSPs, POA&Ms, and related artifacts per NIST SP 800-53 and 800-37 guidelines. Interface with GSA IT Security, agency ISSOs, and SAP Cloud Compliance teams to align controls, evidence, and risk assessments. Conduct continuous monitoring and controls assessment to sustain authorization while defining and communicating security architecture strategies for multi-tenant and hybrid cloud environments. Evaluate vendor security postures and integration security impacts for connected applications, and support internal and external audits by coordinating responses and remediation activities across functional teams. Advise project managers and technical leads on secure configuration baselines and policy compliance.
Required Qualifications
- Minimum 5 years of experience in federal cybersecurity, including at least 3 years in FedRAMP, FISMA, or related authorization frameworks
- Deep familiarity with NIST SP 800-53, 800-171, and 800-37 RMF
- Solid understanding of security architecture for cloud SaaS solutions
- Experience with vulnerability management, incident response, and security operations
- Strong written and verbal communication skills for interfacing with Federal stakeholders
- Bachelor's Degree in Information Security, Computer Science, or related field
- Must be US Citizen with ability to obtain Public Trust Clearance
- Must be willing to travel to Washington, DC on occasion
Desired Qualifications
- Master's Degree preferred
- CISSP, CISM, or FedRAMP 3PAO experience
- Experience supporting GSA, DHS, or other civilian agencies in large-scale digital modernization projects
- Prior involvement in cloud migration or ERP cloud security initiatives
- CISSP or CISM Certifications Preferred
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.