Engagement:
Contract / Full‑Time (Flexible)
Location:
Morocco (Remote)
About the Role
We are seeking an experienced FedRAMP Consultant to
lead and support our organization through the FedRAMP Readiness and
Authorization process. This role requires deep hands‑on experience working
with FedRAMP Moderate/High baselines, supporting 3PAO assessments,
and guiding teams through documentation, remediation, and audit preparation.
You will serve as the primary expert advising our technical,
security, compliance, and leadership teams—ensuring all requirements are
implemented effectively and communicated clearly to external auditors (3PAOs)
and the FedRAMP PMO.
Key Responsibilities
FedRAMP Readiness & Certification
-
Lead the end‑to‑end FedRAMP readiness, assessment, and
authorization activities.
-
Develop and refine all required FedRAMP documentation,
including but not limited to:
-
System Security Plan (SSP)
-
POA&M
-
Security Assessment Plan/Report (SAP/SAR) coordination
-
Policies & procedures aligned with NIST 800‑53 Rev5
controls
-
Conduct readiness assessments and gap analyses to evaluate
compliance posture.
3PAO Audit Coordination
-
Serve as the primary liaison between the organization and
the external 3PAO auditor.
-
Prepare technical and functional teams for 3PAO interviews,
evidence requests, and control validation.
-
Manage evidence collection, review, and submission to
auditors.
-
Support remediation of audit findings and ensure timely
POA&M updates.
Security & Compliance Program Support
-
Work closely with engineering, DevOps, IT, and security
teams to implement and validate technical controls.
-
Review system architecture and guide teams in meeting
FedRAMP‑specific requirements (logging, vulnerability management, boundary
definition, encryption, etc.).
-
Establish continuous monitoring processes and assist in
ongoing compliance operations.
Documentation & Process Improvement
-
Ensure all FedRAMP documentation is continuously updated and
audit‑ready.
-
Create templates, playbooks, and internal workflows to
streamline compliance activities.
-
Provide FedRAMP training/awareness to internal stakeholders
as needed.
Requirements
-
3–7+ years of hands‑on FedRAMP experience
, including working directly with FedRAMP Moderate or High systems.
-
Demonstrated experience participating in or leading
3PAO audits
.
-
Strong understanding of:
-
NIST 800‑53 Rev4/Rev5
-
FedRAMP RAR, SAP/SAR, POA&M processes
-
Cloud environments (AWS, Azure, GCP) and their FedRAMP offerings
-
Proven ability to write and maintain high‑quality security documentation (SSP, policies, procedures).
-
Experience collaborating with engineering/security teams on technical control implementation.
-
Excellent communication skills with the ability to translate compliance requirements into actionable tasks.
Preferred Qualifications
-
FedRAMP program experience from a CSP, 3PAO, or consulting firm.
-
Experience with vulnerability management tools, logging/monitoring solutions, and secure cloud architectures.
-
Relevant certifications (nice to have):
-
CAP, CISSP, CISA, CCSP, Security+, AWS/Azure/GCP security certifications
What Success Looks Like
-
A cleanly organized and ready‑for‑submission FedRAMP package.
-
Streamlined coordination with the 3PAO and minimized audit findings.
-
Clear, repeatable processes to maintain continuous monitoring and ongoing compliance.
-
Strong partnership with internal teams, building confidence and compliance maturity.
