FedRamp Lead Technical SME
This job posting is no longer active.
Job ID: 2404935
Location: REMOTE WORK, DC, United States
Date Posted: Jul 15, 2024
Category: Software
Subcategory: DevSecOps
Schedule: Full-time
Shift: Day Job
Travel: Yes, 10 % of the Time
Minimum Clearance Required: None
Clearance Level Must Be Able to Obtain: None
Potential for Remote Work: Remote
Benefits: Click here
Job Description
Description
SAIC, a leading provider of systems development & deployment, targeting & intelligence analysis, systems engineering & integration, and training capabilities and solutions for the Intelligence Community, is seeking mission-first professionals to fulfill their career goals and objectives while delivering day-to-day excellence on programs of national importance. Join our team today and help us #BringOnTomorrow!
SAIC is looking for a FedRamp Lead Technical SME for remote full time work.
This opportunity is contingent upon award.
1. Lead the organization's FedRAMP compliance efforts, including developing and implementing a comprehensive strategy and roadmap.
2. Serve as the primary technical point of contact for all FedRAMP-related activities, collaborating with cross-functional teams to ensure alignment and adherence to requirements.
3. Conduct initial assessments and gap analyses to identify areas of non-compliance and develop remediation plans as needed.
4. Work closely with internal and external stakeholders to define and document security controls and requirements for FedRAMP compliance.
5. Provide technical guidance and support to project teams throughout the FedRAMP authorization process, including system design, implementation, and testing.
6. Coordinate with third-party assessors and auditors to facilitate FedRAMP assessments and audits, and ensure timely resolution of findings.
7. Stay current with updates and changes to FedRAMP requirements, and communicate implications and requirements to relevant stakeholders.
8. Develop and maintain documentation, policies, and procedures related to FedRAMP compliance.
9. Provide training and awareness sessions on FedRAMP requirements and best practices to internal teams.
Qualifications
- Bachelors and nine years of relevant experience
- Expertise in the FedRAMP Program methodology, understanding and working knowledge of Third-party Assessor Organization (3PAO) assessments for cloud service providers and cloud service offerings. Understanding and working knowledge interpreting 3PAO assessment findings for vulnerabilities, customer responsibility, and continuous monitoring activities.
- Shall have at least two industry recognized certificates. CISSP preferred. Other acceptable certificates include Security+, Certified Information Security Manager (CISM), GIAC Security Essentials Certification (GSEC), CCSK.
- Expertise in reviewing FedRAMP Security documentation for completion, gaps, vulnerabilities, and identifying remediations that may be required.
- Expertise in developing Plans of Actions and Milestones (POA&M) for cloud services.
- Demonstrated understanding of current cloud deployment best practices and governing policy such as NIST, FIPS, RMF, FedRAMP, etc.
- Expertise in developing repeatable templates to leverage to answer hybrid and customer responsible security controls and ensuring total team compliance in leveraging necessary templates and tools.
- Expertise in training and managing a team of security professionals to execute against a significant volume of work in progress leveraging agile best practices.
- Responsible to support audit findings, remediation activities, and documentation gaps as well as train others against best practices to achieve maximum ATO duration.
-
Minimum of 7 years of experience in cybersecurity or IT governance, with a focus on FedRAMP compliance.
-
Strong understanding of FedRAMP requirements, processes, and controls, with experience leading FedRAMP initiatives.
-
Technical expertise in cloud computing technologies, preferably with experience in AWS, Azure, or Google Cloud Platform.
-
Ability to obtain and maintain Public Trust security clearance
Target salary range: $125,001 - $150,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
SAIC accepts applications on an ongoing basis and there is no deadline.
Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.
Overview
SAIC® is a premier Fortune 500® technology integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, civilian and intelligence markets includes secure high-end solutions in mission IT, enterprise IT, engineering services and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.
We are approximately 24,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer, fostering a culture of diversity, equity and inclusion, which is core to our values and important to attract and retain exceptional talent. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.4 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.
