FedRAMP Subject Matter Expert

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a FedRAMP Subject Matter Expert based in United States.

This role is a specialized consulting position focused on guiding organizations through the FedRAMP authorization and compliance process for cloud-based systems. You will support clients in achieving and maintaining compliance with federal security standards, particularly NIST SP 800-53, while preparing them for Third-Party Assessment Organization (3PAO) audits. The position involves assessing security postures, identifying compliance gaps, and developing remediation strategies aligned with FedRAMP requirements. You will also play a key role in shaping documentation, readiness assessments, and technical control implementations. In addition, this role includes client-facing advisory responsibilities, including participation in pre-sales discussions and collaboration with account teams. It is an opportunity to support mission-critical cloud security initiatives within highly regulated federal environments.

Accountabilities:

• Advise clients on FedRAMP requirements, authorization pathways, and compliance strategies aligned with NIST SP 800-53 standards.
• Conduct gap assessments and develop remediation roadmaps to support FedRAMP readiness and continuous compliance.
• Support the development and refinement of key security documentation, including System Security Plans (SSP), policies, and procedures.
• Prepare organizations for 3PAO audits through mock assessments, readiness reviews, and control validation exercises.
• Provide guidance on cloud security architecture and ensure alignment with federal security frameworks and best practices.
• Collaborate with account managers on pre-sales activities, including client discussions, solution design, and proposal development.
• Track project milestones and contribute to successful delivery of FedRAMP compliance initiatives across client engagements.

Requirements:

• Bachelor’s degree in IT, Cybersecurity, or a related field.
• 5+ years of experience in IT security with a strong focus on cloud security and regulatory compliance.
• Deep expertise in FedRAMP, NIST SP 800-53, and federal cloud security frameworks.
• Relevant certifications such as CISSP, CISM, CISA, or PMP are highly preferred.
• Proven experience supporting cloud authorization processes and 3PAO audit readiness activities.
• Strong ability to develop technical documentation, including SSPs, security policies, and compliance artifacts.
• Excellent communication, stakeholder management, and client-facing advisory skills.
• Strong analytical and project coordination abilities in complex, regulated environments.

Benefits:

• Competitive consulting compensation ranging from $50–$95 per hour (1099 or Corp-to-Corp).
• Flexible, part-time consulting engagement with project-based assignments starting in late 2026 or 2027.
• Remote work with adaptable scheduling based on client needs.
• Opportunity to contribute to high-impact federal cloud security and compliance programs.
• Exposure to advanced FedRAMP authorization processes and federal cybersecurity frameworks.
• Autonomy in advisory work with involvement in both technical delivery and client strategy.
• Engagement with mission-critical government cloud modernization initiatives.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1