> Markdown version of [/jobs/ext/572489-fedramp-security-consultant](https://www.wearedevelopers.com/jobs/ext/572489-fedramp-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # FedRAMP Security Consultant - **Company:** RSI Inc. - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $100,000.0 - $140,000.0 - **Contract:** Contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Identity and Access Management, Information Systems Security Architecture Professional, Network Architecture, Cloud Services, Data Streaming, Systems Architecture, Data Logging, Google Cloud - **Published:** June 20, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=20860585c1923c89 ## About the Role Do you have experience in Regulatory Frameworks (Architecture security)?, 5+ years in cybersecurity, compliance, or risk assessment roles, with demonstrated experience supporting or leading structured security or compliance engagements * At least 2-3 years working with NIST-based frameworks (e.g., NIST SP 800-53, RMF, FedRAMP, FISMA, or similar) * FedRAMP / NIST Expertise: Hands-on experience supporting FedRAMP or NIST SP 800-53-based initiatives, including readiness assessments, gap analyses, or documentation development (SSP, POA&M, or similar) * Strong ability to interpret control intent and apply it to real-world cloud environment * Advisory & Problem-Solving Skills: * Experience guiding clients through compliance challenges, including defining remediation strategies, prioritizing gaps, and aligning technical implementations to regulatory expectations * Cloud & Technical Understanding: Familiarity with AWS, Azure, or GCP environments, including identity and access management, logging/monitoring, network architecture, and secure configuration practices * Ability to understand system architecture diagrams and data flows * Client-Facing Capability: Proven ability to lead discussions with technical and non-technical stakeholders, ask effective questions, and drive engagements forward * Certifications: CISSP, CISA, CISM, CCSP, or similar * Strongly Preferred (But Not Required): * Experience supporting FedRAMP ATO efforts or working with a 3PAO * Experience with adjacent frameworks such as CMMC, FISMA, or DoD RMF Mindset We Value * Take ownership and deliver high-quality work independently * Stay organized and manage multiple engagements effectively * Apply critical thinking and professional skepticism when reviewing evidence * Communicate clearly and professionally with clients and internal teams * Maintain flexibility and adaptability in a project-based environment ## Description This is a 1099 independent contractor role. The compensation range shown reflects an annualized equivalent based on full-time availability (approximately 40 hours per week). Actual earnings may vary depending on hours worked, project assignments, and scope of engagement., As a FedRAMP Security Consultant, you will support cloud service providers in preparing for FedRAMP authorization through readiness assessments, gap analysis, and development of required security documentation. This role focuses on FedRAMP advisory and readiness activities, including aligning client environments to NIST SP 800-53 requirements, supporting the development of System Security Plans (SSP), POA&Ms, and related artifacts, and guiding organizations through the FedRAMP authorization process. You will work directly with client stakeholders to evaluate cloud environments, interpret control requirements, and provide clear, actionable recommendations to support authorization readiness. This position requires a high degree of ownership, strong technical judgment, and the ability to operate effectively in client-facing engagements involving complex cloud and compliance environments. What You'll Do * Lead FedRAMP Readiness & Advisory Engagements: Work directly with cloud service providers to assess FedRAMP readiness, identify control gaps, and develop actionable remediation roadmaps aligned with NIST SP 800-53 and FedRAMP requirements. * Perform Gap Assessments & Control Analysis: Evaluate current-state security programs against FedRAMP requirements, including technical, operational, and documentation controls, and clearly articulate gaps and risk implications. * Develop Core FedRAMP Artifacts: Support and/or lead the development of key deliverables such as System Security Plans (SSP), POA&Ms, policies, and supporting documentation required for FedRAMP authorization. * Interpret NIST Controls in Real Environments: Translate NIST SP 800-53 control requirements into practical implementations within cloud environments (AWS, Azure, GCP), including shared responsibility and inherited controls. * Advise on Architecture & Control Implementation: Provide guidance on security architecture, control design, and implementation strategies to align client environments with FedRAMP expectations. * Engage with Client Stakeholders: Lead technical discussions and workshops with engineering, security, and compliance teams to validate implementations and drive progress toward authorization readiness. * Support Future Assessment Capability: Contribute to RSI's development of FedRAMP assessment methodologies, templates, and processes as the organization progresses toward 3PAO readiness. * Collaborate Across Internal Teams: Partner with delivery, sales, and leadership to scope engagements, support proposals, and refine service offerings. ## Related Videos - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)