Cloud Security Architect, CISO Support (RMF)
Core
Manages the Authorization to Operate (ATO) process under NIST RMF for a centralized cloud broker supporting over 1,000 customer environments across AWS, GCP, and Azure.
Role type
Senior IC Cloud Security Architect (RMF)
Builds
Reusable security architecture decision packages, control catalogs, and authorization documentation for federal cloud environments.
Domain
Federal government cloud security and compliance
Required skills
NIST RMF process management, SSP/SAR/POA&M authoring, FedRAMP compliance, cloud security architecture (AWS/GCP/Azure), threat modeling, security architecture reviews, control inheritance management, policy as code, communication with Authorizing Officials
Preferred skills
OSCAL experience, GRC tools (ServiceNow/Splunk), infrastructure as code guardrails (Terraform), FISMA Moderate to High boundary transitions, advanced certifications (CAP/ISSEP/CISA)
Technologies
AWS, Google Cloud Platform, Microsoft Azure, ServiceNow, Splunk, Terraform, OSCAL
Responsibilities
Manage ATO process including categorization, control selection, assessment, and continuous monitoring; Prepare and track System Security Plans and authorization decision packages; Define and maintain inherited control catalogs for multi-tenant environments; Review new service security architecture before deployment; Coordinate assessors and engineers on evidence and schedules
Seniority
Senior, hands-on IC
