21 of 21 Permanent FedRAMP Jobs

Analysis for dependency scanning (Trivy, Snyk, or similar) is preferred Compliance & Hardening: 2+ years of experience in Security compliance frameworks (NIST, STIG, CIS benchmarks, FedRAMP) is required 2+ years of experience in Security hardening and baseline configuration is required 2+ years of experience in Audit logging and security event monitoring ...

skillsets such as data science, UI/UX, cloud engineering, and platform engineering to understand the entire software ecosystem. Knowledge of federal cybersecurity, RMF, FedRAMP, or regulatory frameworks. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national ...

skillsets such as data science, UI/UX, cloud engineering, and platform engineering to understand the entire software ecosystem. Knowledge of federal cybersecurity, RMF, FedRAMP, or regulatory frameworks. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national ...

skillsets such as data science, UI/UX, cloud engineering, and platform engineering to understand the entire software ecosystem. Knowledge of federal cybersecurity, RMF, FedRAMP, or regulatory frameworks. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national ...

skillsets such as data science, UI/UX, cloud engineering, and platform engineering to understand the entire software ecosystem. Knowledge of federal cybersecurity, RMF, FedRAMP, or regulatory frameworks. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national ...

high-performance culture. Security & Compliance Leadership: Lead integration of security principles and ensure compliance with relevant industry standards (CIS, NIST, SOC 2, FedRAMP). Promote adoption of security tools and standards across DevSecOps processes. Cross-Organizational Liaison: Represent Boeing as a trusted technical advisor on advanced programs; lead coordination with ...

ecosystem. Experience with IaC tools such as Terraform, Open Tofu, AWS CDK, or CloudFormation to deploy cloud native applications. Knowledge of federal cybersecurity, RMF, FedRAMP, or regulatory frameworks. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national ...

ecosystem. Experience with IaC tools such as Terraform, Open Tofu, AWS CDK, or CloudFormation to deploy cloud native applications. Knowledge of federal cybersecurity, RMF, FedRAMP, or regulatory frameworks. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national ...

Salesforce Public Sector Solutions (PSS)/Agentforce Public Sector. Strong experience with OmniStudio, including FlexCards, OmniScripts, DataRaptors, and Integration Procedures. Experience designing solutions within FedRAMP, government cloud, or highly regulated environments. Knowledge of enterprise architecture frameworks such as TOGAF or similar methodologies. Experience with DevOps and CI/CD tools ...

Kafka, Spark, EMR). Familiarity with model monitoring and explainability tools (SageMaker Model Monitor, Clarify, MLflow). Experience in regulated or public-sector environments (FedRAMP, GovCloud, compliance frameworks). Knowledge of GPU workloads, distributed training, and inference optimization. ...

Terraform to automate deployments and security compliance. Security & Compliance: Ensure adherence to Federal cybersecurity frameworks (e.g., NIST 800-171, NIST 800-53, RMF, FedRAMP, Zero Trust). Implement STIGs, security baselines, and automated security scanning (SAST/DAST). Infrastructure as Code (IaC): Automate infrastructure provisioning and configuration management using ...

evaluation results for a team to maintain going forward. Nice to Have: Prior exposure to GRC or security compliance workflows (SOC 2, ISO 27001, FedRAMP, HIPAA), enough to understand control requirements, evidence, and why traceability matters to an auditor. Experience with compliance automation platforms (Vanta, Drata, Secureframe) or open-source ...

unfamiliar technologies or domains. NICE TO HAVE Experience in a professional services, consulting, or MSSP environment. Familiarity with government contracting and compliance frameworks (FedRAMP, CMMC, NIST 800-171). Relevant certifications (CISSP, CISM, GIAC, CrowdStrike CCFA/CCFR, Splunk, Azure/AWS Security). Background in AI/ML applications ...

data modeling concepts Experience with data visualization tools such as Power BI or Tableau Knowledge of cybersecurity principles, Zero Trust Architecture, RMF and FedRAMP compliance Prior experience with federal or public sector digital modernization projects Familiarity with Lean Six Sigma, ITIL, or service-oriented architecture (SOA) frameworks Salary Range ...

production incidents and develop repeatable operational runbooks. Implement security controls and automated guardrails within engineering workflows. Partner with security/compliance teams to support FedRAMP, SOC 2, and NIST-based environments. Lead and mentor a small DevOps/Security operations team. Qualifications 7+ years within DevOps, DevSecOps, Platform Engineering … code, and cloud security. Strong understanding of monitoring, logging, vulnerability management, and incident response. Previous technical leadership or team-lead experience. Experience within FedRAMP, SOC 2, NIST, government, or another regulated environment is highly preferred. Interested in hearing more? Easy Apply now by clicking the "Quick Apply" button. Jobot ...

Compliance: Integrate security throughout the software development lifecycle and support compliance with applicable federal cybersecurity frameworks, including NIST 800-53, NIST 800-171, RMF, FedRAMP, STIGs, and Zero Trust principles. Implement and support automated security capabilities including SAST/DAST, software composition analysis, container scanning, IaC scanning, secrets detection, vulnerability … highly regulated environments. Hands-on experience with AWS GovCloud. Knowledge of federal cybersecurity requirements and frameworks including RMF, NIST 800-53, NIST 800-171, FedRAMP, DISA STIGs, and Zero Trust. Experience with Amazon Bedrock, Amazon Sagemaker, or other enterprise AI/ML platforms and services. Familiarity with operational considerations ...

tenant identity, managed identities, service principals, Key Vault secret lifecycle, private networking, and API gateway patterns. • Maintain a defensible position on data residency and FedRAMP authorization boundaries for every commercial-cloud service in use, and present that position to auditors and federal reviewers. 3.3 AI and Agentic Development • Serve … security, and District privacy officials. • Apply and evidence compliance with OCTO IT policies (octo.dc.gov/page/it-policies), NIST SP 800-53, FISMA, FedRAMP, HIPAA, 45 CFR 1355 (CCWIS), Title IV-E confidentiality, and District data protection law including DC Code 28-3851 et seq. breach notification obligations. • Design ...

Azure, and the platform is getting more interesting: an AI product suite heading toward general availability, self-hosted AI observability and telemetry inside a FedRAMP-conscious boundary, autonomous agents participating in delivery, and a microservices decomposition in flight. You will deploy, operate, and scale that platform, and you will … remediation; cost is an engineering metric here, not a finance afterthought Harden production access and controls: least privilege, secrets management, audit evidence, and a FedRAMP-conscious security posture Partner with AI Operations on the deploy-and-release path: Octopus Deploy, environment promotion, progressive rollout, and rollback Build platform reliability: monitoring ...

Azure, and the platform is getting more interesting: an AI product suite heading toward general availability, self-hosted AI observability and telemetry inside a FedRAMP-conscious boundary, autonomous agents participating in delivery, and a microservices decomposition in flight. You will deploy, operate, and scale that platform, and you will … remediation; cost is an engineering metric here, not a finance afterthought Harden production access and controls: least privilege, secrets management, audit evidence, and a FedRAMP-conscious security posture Partner with AI Operations on the deploy-and-release path: Octopus Deploy, environment promotion, progressive rollout, and rollback Build platform reliability: monitoring ...

Apply secure by design patterns-VPC SC, private service access, CMEK, fine grained IAM, artifact signing, and secrets management-aligned to NIST , RMF, and FedRAMP baselines. Operationalize LLM/GenAI (RAG, tool use/agents, safety filters, evaluation harnesses) including retrieval over structured/unstructured data; leverage DoW approved … stores, monitoring/drift, automated retraining) and strong data engineering fundamentals. Ability to design for security & compliance in DoW/Federal contexts (NIST , RMF, FedRAMP; Zero Trust principles). Hands on experience with Vertex AI Agent Builder, Model Garden, embeddings/vector search (e.g., BigQuery Vector, AlloyDB AI), and evaluation ...

Job Title : Security Analyst - Security Operations & Incident Response Position Overview Help strengthen enterprise cybersecurity through hands-on security monitoring, incident response, threat hunting, and compliance support. This role contributes to protecting information systems and networks ...