Cloud Security Architect, CISO Support

Northramp

. Support the Chief Information Security Officer for a centralized services contract supporting an HHS client.

Posted 10/28/2026full-timeBethesda • Maryland • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing the Authorization to Operate process under the NIST Risk Management Framework, including the preparation of security documentation and continuous monitoring. Proficient in cloud security architecture across AWS, GCP, and Azure, with a strong focus on compliance with FedRAMP and FISMA standards.

Highest-signal resume keywords

NIST Risk Management Framework (RMF)Authorization to Operate (ATO) PackagesCloud Security Architecture (AWS, GCP, Azure)FedRAMP ComplianceSecurity Documentation (SSPs, SARs, POA&Ms)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

NIST SP 800-53 Rev. 5Threat ModelingControl Selection and TailoringContinuous MonitoringPolicy as CodeInfrastructure as CodeVulnerability ManagementIdentity and Access Management (IAM)Network SegmentationFIPS 140 Validated Encryption

Soft Skills

Written CommunicationVerbal CommunicationCollaborationBriefing Executives

Tools & Technologies

ServiceNowSplunkGRC ToolsTerraformOSCAL

Certifications & Qualifications

Certified Information Systems Security Professional (CISSP)Certified Cloud Security Professional (CCSP)Certified Information Security Manager (CISM)AWS Certified Security SpecialtyMicrosoft Certified Cybersecurity Architect ExpertGoogle Professional Cloud Security EngineerCertified Authorization Professional (CAP)Information Systems Security Engineering Professional (ISSEP)Certified Information Systems Auditor (CISA)

Industry Keywords

FISMAFedRAMPAuthorization Decision PackagesInherited Control CatalogsMulti-Tenant Cloud EnvironmentCustomer Responsibility MatricesAnnual AssessmentsSignificant Change ReviewsControl EvidenceRisk Acceptance Requests

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformServiceNowSplunkTerraform

About the role

Key responsibilities & impact

Support the Chief Information Security Officer for a centralized services contract supporting an HHS client.
Manage the Authorization to Operate process for broker authorization boundaries and customer environments under the NIST Risk Management Framework.
Manage categorization, control selection and tailoring, implementation, assessment, authorization, and continuous monitoring.
Prepare and track SSPs, SARs, POA&Ms, and authorization decision packages.
Maintain schedules and status reports for environments in the authorization process.
Direct continuous monitoring, including annual assessments, significant change reviews, POA&M closure, and vulnerability and configuration findings.
Brief the CISO and Authorizing Officials on authorization status, open risks, and risk acceptance requests.
Align authorization packages with FISMA, NIST standards, FIPS 199/200, and FedRAMP baselines.
Coordinate assessors, ISSOs, system owners, and engineers on evidence and schedules.
Define and maintain inherited-control catalogs across AWS, GCP, and Azure.
Maintain customer responsibility matrices tied to provider FedRAMP authorizations and federal regions.
Build reusable SSP sections, control narratives, and evidence templates.
Review onboarding requests to determine inherited versus customer-owned controls.
Report inherited-control share and onboarding-to-authorization timelines.
Review new services before deployment, including data flows, authorization boundaries, IAM, network segmentation, FIPS 140 validated encryption, logging, and vulnerability management.
Work with technical leads and cloud engineers to select compliant cloud providers and product stacks.
Write security architecture decisions documenting required controls, inherited controls, and residual risk.
Write reference architectures and guardrails for AWS, Azure, and GCP accounts, subscriptions, projects, landing zones, and policy as code.
Determine whether services fit within authorized boundaries or require significant-change reviews.
Check FedRAMP status before services enter the broker catalog.
Participate in architecture and change review boards.

Requirements

What you’ll need

Bachelor's degree in information security, computer science, or a related field, or equivalent experience.
6 years of information security experience, including 3 years on federal ATO packages under the NIST RMF.
Authored SSPs, SARs, and POA&Ms that an Authorizing Official accepted.
Working knowledge of the NIST SP 800-53 Rev. 5 control families and of common and inherited controls.
Hands-on security architecture experience in at least one of AWS, GCP, or Azure in federal environments, and working knowledge of the other two: account, subscription, and project structure, identity, network, encryption, and logging.
Experience with FedRAMP authorized services, FedRAMP baselines, and customer responsibility matrices.
Experience running threat models and architecture reviews with engineers.
Written and spoken communication with CISOs, Authorizing Officials, assessors, and engineers.
One of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or Certified Information Security Manager (CISM).
Eligible to work in the United States.
Preferred: Experience supporting a multi-tenant cloud environment with hundreds of accounts and many customers.
Preferred: Experience building inherited control catalogs, reusable authorization packages, or automated control evidence, including OSCAL.
Preferred: Experience with GRC tools, ServiceNow, and Splunk for control evidence and monitoring.
Preferred: Experience writing policy as code and infrastructure as code guardrails, for example with Terraform.
Preferred: Experience moving a system boundary from FISMA Moderate to High.
Preferred certifications: CAP, ISSEP, CISA, AWS Certified Security Specialty, Microsoft Certified Cybersecurity Architect Expert, or Google Professional Cloud Security Engineer.

Benefits

Comp & perks

Employee Bonus Programs
Medical, Dental, and Vision Insurance
401(k) Retirement Plan
Basic Life, Voluntary Life, and AD&D Insurance
Short-Term and Long-Term Disability Insurance
Paid Time Off
Paid Parental Leave
Training and Professional Development
Remote Work Opportunities
Wellness Resources