FedRAMP 20X Advisory Senior Consultant

The role

The Senior Consultant, FedRAMP 20x Advisory leads projects evaluating client security and compliance against regulatory requirements. You will design solutions mapped to FedRAMP 20x Key Security Indicators and build automated validation approaches using code.

What you will do

• Deliver gap analysis and detailed program recommendations for clients.
• Prepare for FedRAMP 20x Vulnerability Detection & Response.
• Advise on FIPS 140-2 / 140-3 Encryption.
• Develop and maintain FedRAMP Authorization Boundary Diagram.
• Optimize Management Plane Tooling.
• Develop documentation such as a Security Decision Record and Certification Package Overview.
• Design and implement client solutions mapped to FedRAMP 20x Key Security Indicators.
• Build and support automated, code-based validation methods.
• Track FedRAMP 20x releases and Change Requests.
• Use AI/ML tools to catalog Key Security Indicators.

Required qualifications

• Bachelor’s Degree or equivalent job experience
• 6+ years of professional services experience
• 4+ year of FedRAMP experience or cloud security engineering experience
• Working knowledge of FedRAMP 20x KSIs
• Comfort using AI tools to interpret and organize regulatory requirements
• Proficient in Microsoft 365 product suite
• Ability to be self-directed with little oversight
• Ability to quickly assess new and leading-edge technologies and concepts
• Ability to develop and maintain strong relationships with team members and clients
• Comfortable supporting fast-paced team environments
• Strong technical acumen with regards to cloud security

Nice to have

• Experience with Infrastructure-as-Code (Terraform) and scripting/automation
• Looking to achieve AWS Solutions Architect or Security Specialty (or Azure / GCP equivalent)
• Familiarity of testing in Cloud environments (previous 3PAO experience)
• Experience writing scripts or building integrations for continuous compliance monitoring/validation
• Interest in deepening cloud engineering skills (AWS/Azure/GCP) beyond a compliance-only background
• Active GitHub or portfolio showing coding/cloud automation work

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401K plan with a 4% match
• Company paid short-term disability
• Company paid long-term disability
• Company paid AD&D and life insurance
• Flex time off
• Annual bonuses
• Training stipends
• Certification reimbursements
• Access to over 30,000 free online training courses

Before you apply

• All persons hired will be required to verify identity and eligibility to work in the United States

About the company

Fortreum is a trusted leader in cloud and cybersecurity services, ranked among the Top 5 FedRAMP Third Party Assessment Organizations (3PAO). They deliver independent, third-party, vendor-agnostic regulatory assessment and advisory services.