FedRAMP Security Engineer | Remote, USA | $130,000 – $160,000

Maestro Search is a cybersecurity talent partner connecting cybersecurity professionals with innovative companies. The company is seeking a FedRAMP Security Engineer to own an in-progress authorization, including the authorization package, cloud security posture, continuous monitoring, and transition to FedRAMP 20x. The role involves implementing NIST 800-53 controls, managing 3PAO interactions, reviewing cloud architecture, and maintaining compliance artifacts.

Responsibilities:

• The authorization package end to end; SSP, POA&M and supporting artifacts
• The technical security posture of the cloud environment carrying the boundary
• ConMon post-authorization: monthly scanning, deviation requests, significant change requests, annual assessment
• The move to FedRAMP 20x, including automated evidence collection and key security indicators
• Working through 800-53 controls with engineering teams and turning them into implemented configuration
• Handling 3PAO evidence requests, testing and interview sessions
• Reviewing cloud architecture and hardening decisions against the boundary
• Keeping the package accurate as the platform changes underneath it

Requirements:

• Hands-on assessment experience against NIST 800-53 and 800-53A, gained at a 3PAO or on the CSP side
• FedRAMP delivery experience, a completed authorization or multiple assessments behind you
• CISSP plus a main AWS security certification
• US person (citizen or green card holder)
• Deep technical cloud security knowledge and the ability to assess it, AWS preferred with Azure or GCP considered