51 to 71 of 71 Permanent FedRAMP Jobs

tenant identity, managed identities, service principals, Key Vault secret lifecycle, private networking, and API gateway patterns. • Maintain a defensible position on data residency and FedRAMP authorization boundaries for every commercial-cloud service in use, and present that position to auditors and federal reviewers. 3.3 AI and Agentic Development • Serve … security, and District privacy officials. • Apply and evidence compliance with OCTO IT policies (octo.dc.gov/page/it-policies), NIST SP 800-53, FISMA, FedRAMP, HIPAA, 45 CFR 1355 (CCWIS), Title IV-E confidentiality, and District data protection law including DC Code 28-3851 et seq. breach notification obligations. • Design ...

Azure, and the platform is getting more interesting: an AI product suite heading toward general availability, self-hosted AI observability and telemetry inside a FedRAMP-conscious boundary, autonomous agents participating in delivery, and a microservices decomposition in flight. You will deploy, operate, and scale that platform, and you will … remediation; cost is an engineering metric here, not a finance afterthought Harden production access and controls: least privilege, secrets management, audit evidence, and a FedRAMP-conscious security posture Partner with AI Operations on the deploy-and-release path: Octopus Deploy, environment promotion, progressive rollout, and rollback Build platform reliability: monitoring ...

Azure, and the platform is getting more interesting: an AI product suite heading toward general availability, self-hosted AI observability and telemetry inside a FedRAMP-conscious boundary, autonomous agents participating in delivery, and a microservices decomposition in flight. You will deploy, operate, and scale that platform, and you will … remediation; cost is an engineering metric here, not a finance afterthought Harden production access and controls: least privilege, secrets management, audit evidence, and a FedRAMP-conscious security posture Partner with AI Operations on the deploy-and-release path: Octopus Deploy, environment promotion, progressive rollout, and rollback Build platform reliability: monitoring ...

Secrets Manager and the External Secrets Operator with automated rotation. Maintain TLS automation via cert-manager and OIDC authentication flows. Enable SOC2, CMMC, and FedRAMP compliance activities: GRC platform integration, audit logging pipelines, FIPS-validated endpoint configuration, system boundary documentation, and evidence collection for third-party assessments. What You Bring … Comfort with Linux systems administration and shell scripting. Familiarity with compliance-driven infrastructure: audit logging, access controls, and evidence collection for frameworks like CMMC, FedRAMP, and SOC 2. A collaborative, low-ego mindset: you thrive in small, fast-moving teams. Nice to Have Experience with Envoy Gateway or the Kubernetes ...

Serve as a technical liaison between the FAA program office and cloud service vendors to develop and optimize solutions that meet performance, availability, and FedRAMP-compliant security objectives. Configure and manage monitoring, logging, and alerting systems using AWS CloudWatch, CloudTrail, AWS Config, and other observability tools. Participate in federal configuration … collaborating across diverse teams. Desired Experiences: Proven experience in supporting major federal acquisition programs, particularly with the FAA. Working knowledge of information security protocols, FedRAMP, and compliance frameworks (e.g., NIST 800-53, ISO 27001). Experience with AWS Well-Architected Framework and cost optimization best practices. Familiarity with IP network ...

Serve as a technical liaison between the FAA program office and cloud service vendors to develop and optimize solutions that meet performance, availability, and FedRAMP-compliant security objectives. Configure and manage monitoring, logging, and alerting systems using AWS CloudWatch, CloudTrail, AWS Config, and other observability tools. Participate in federal configuration … collaborating across diverse teams. Desired Experiences: Proven experience in supporting major federal acquisition programs, particularly with the FAA. Working knowledge of information security protocols, FedRAMP, and compliance frameworks (e.g., NIST 800-53, ISO 27001). Experience with AWS Well-Architected Framework and cost optimization best practices. Familiarity with IP network ...

with a track record of delivering across multiple teams. Solid knowledge of cybersecurity frameworks (NIST 800-53, ISO 27001, SOC 2, and/or FedRAMP) and hands‐on audit experience. Enough technical depth to be the team's technical point of contact: comfortable reasoning about cloud infrastructure (AWS, Azure … Prior experience as a technical SME, or as a bridge between compliance and engineering teams. Experience leading a SOC 2 Type II, ISO 27001, FedRAMP, or NIST 800-53 audit end‐to‐end, and familiarity with OSCAL or other compliance‐automation tooling. Familiarity with security monitoring tools (e.g., Tenable, Splunk ...

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And ...

framework. The role requires strong IT security knowledge, encryption awareness, secure architecture and agile development familiarity. Cloud proficiency (AWS/Azure/Google) and FedRAMP assessment experience are essential, along with creating security artifacts, interpreting vulnerability tools, SIEM use, and technical writing. #J-18808-Ljbffr ...

that fail the build. Own software supply-chain posture (SBOM, signing, provenance, vulnerability SLAs) and continuous audit readiness for [SOC 2/ISO 27001; FedRAMP or regulated-market programme if applicable]. If a control only works because people are careful, it is not a control. Cost and vendors. … post-incident practice that changed how the organisation worked. You have run a regulated or audited environment end to end (ISO 27001, SOC 2, FedRAMP, NIST 800-53 or equivalent) and know the difference between passing an audit and being continuously compliant. You understand hybrid estates architecturally — long-lived desktop ...

Job Description Job Description LightFeather is seeking a skilled Oracle Cloud Infrastructure Engineer to support the U.S. Department of State in modernizing and maintaining secure, scalable cloud environments. In this role, you will design, implement ...

Job Description Job Description LightFeather is seeking a skilled Oracle Cloud Infrastructure Engineer to support the U.S. Department of State in modernizing and maintaining secure, scalable cloud environments. In this role, you will design, implement ...

UFORCE exists to make aggression unaffordable. Founded in Ukraine and headquartered in London, UFORCE is a defence-technology company with operations across Europe, the United States and Asia. UFORCE builds uncrewed vessels, ground robotics and ...

Apply secure by design patterns-VPC SC, private service access, CMEK, fine grained IAM, artifact signing, and secrets management-aligned to NIST , RMF, and FedRAMP baselines. Operationalize LLM/GenAI (RAG, tool use/agents, safety filters, evaluation harnesses) including retrieval over structured/unstructured data; leverage DoW approved … stores, monitoring/drift, automated retraining) and strong data engineering fundamentals. Ability to design for security & compliance in DoW/Federal contexts (NIST , RMF, FedRAMP; Zero Trust principles). Hands on experience with Vertex AI Agent Builder, Model Garden, embeddings/vector search (e.g., BigQuery Vector, AlloyDB AI), and evaluation ...

Job Title : Security Analyst - Security Operations & Incident Response Position Overview Help strengthen enterprise cybersecurity through hands-on security monitoring, incident response, threat hunting, and compliance support. This role contributes to protecting information systems and networks ...

Senior Manager, Customer Engineering UKI Hybrid About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions ...

timely and effective remediation of security vulnerabilities in line with defined SLAs. A key focus of the role will be supporting DOD IL4 and Fedramp preparation, ensuring vulnerability processes, evidence, and tooling align with regulatory and assurance requirements. You will also apply AI-driven tools and methodologies to enhance scanning … Develop, document, and deliver technical remediation guidance and solutions to enable application and infrastructure teams to remediate efficiently and consistently. Support DOD IL4 and Fedramp preparation, by ensuring vulnerability management processes, evidence, reporting, and controls meet regulatory and assurance expectations. Work closely with engineering and service teams to embed vulnerability ...

will be helping work those out, and that experience is still rare. Take on a different class of problem. Making our systems work inside FedRAMP environments is a major upcoming project, and engineering under that kind of constraint is a skill set that stays with you. Requirements … systems where data isolation is a hard requirement. Experience working in compliance-constrained environments. A significant upcoming project is making our systems work within FedRAMP environments. Interview Process Initial Intro Interview with Hiring Manager - 30 Minutes Technical Assessment - 1 hour Competency-based Interview - 1 hour Founder interview - 30 Minutes Benefits ...

highlight security within products. Supports compliance audits and readiness initiatives (driven by frameworks such as SOC 1, SOC 2, ISO 27001, ISO 42001, FedRAMP). Monitors control remediation efforts with stakeholders across various functions in different geographies & time zones. Document gap analysis in work programs and record progress on remediation … with an IT audit background. Experience implementing or auditing information security programs based on industry frameworks such as ISO 27001, SOC 1, SOC 2, FedRAMP, or similar. Bachelor’s Degree or equivalent work experience in Computer Science, Engineering, Accounting, or related field required. Strong, customer-facing communication skills, with expertise ...

highlight security within products. Supports compliance audits and readiness initiatives (driven by frameworks such as SOC 1, SOC 2, ISO 27001, ISO 42001, FedRAMP). Monitors control remediation efforts with stakeholders across various functions in different geographies & time zones. Document gap analysis in work programs and record progress on remediation … with an IT audit background. Experience implementing or auditing information security programs based on industry frameworks such as ISO 27001, SOC 1, SOC 2, FedRAMP, or similar. Bachelor’s Degree or equivalent work experience in Computer Science, Engineering, Accounting, or related field required. Strong, customer-facing communication skills, with expertise ...

Certinia is seeking a Security Compliance Analyst to support enterprise-wide security compliance and customer trust programs. You will engage with sales, IT, Legal, and Privacy, and report to the Head of Information Security. You ...