Technical Consultant – FedRAMP Assessment

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $80k - $134k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coalfire

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2001

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

📋 Description

• Collaborate with assessors on federal compliance assessments, including FedRAMP, NIST 800-171, and FISMA • Plan assessments for clients • Review technical artifacts to determine whether they demonstrate control implementation • Review infrastructure-as-code templates, CI/CD configurations, and deployment scripts • Use scripting to parse and analyze configuration exports, logs, inventories, and scan data • Research unfamiliar technologies, products, and configurations using vendor documentation and hardening guides • Analyze network traffic flows and implementation of common infrastructure services • Evaluate artifact completeness, currency, and scope • Identify insufficient artifacts and explain required evidence to clients • Review information system security plans • Lead technical interviews and inquiry walkthroughs with client engineers and administrators • Corroborate inquiry conclusions and maintain interview notes • Execute examination, interview, and testing procedures • Assess vulnerabilities against applicable security frameworks • Draft audit observations and assessment reports • Review audit planning and reporting materials • Progress toward FedRAMP Assessor responsibilities and own control families under senior assessor guidance • Educate clients about compliance activities • Manage priorities and delivery utilization targets • Deliver quality products and services on time • Maintain certifications, credentials, and technical knowledge through professional development • Collaborate with project managers, quality management, and delivery teams • Maintain relationships with clients and stakeholders • Identify and escalate upsell and cross-sell opportunities • Apply quality standards throughout work products and deliverables • Advise customers on scope-related issues • Develop documentation and recommendations to improve customers' security posture

🎯 Requirements

• Minimum 2-3 years of experience in a technical IT role • Ability to read and interpret technical artifacts, including configuration files, command-line output, logs, and system settings • Strong understanding of networking fundamentals, including TCP/IP, subnetting, routing, VLANs and segmentation, NAT, firewalls and ACLs, ports and protocols • Working knowledge of DNS, DHCP, NTP, directory services/LDAP, authentication and MFA, SSH, TLS and certificates, SMTP, SNMP, syslog, load balancers, proxies, and VPN • Working knowledge of Linux and Windows operating system configuration • Experience with infrastructure as code, such as Terraform, CloudFormation, or Ansible • Experience with CI/CD pipelines, such as GitHub Actions, GitLab CI, Azure DevOps, or Jenkins • Scripting experience with Python, PowerShell, or Bash • Ability to read and interpret firewall rulesets and network/boundary/data flow diagrams • Ability to review vulnerability scan output and understand affected components, severity, and remediation • Familiarity with NIST SP 800-37 Revision 2, 800-53 Revision 5, and 800-53A Revision 5 • Ability to independently research technical topics and develop testing approaches for 800-53 control implementations • Ability to assist with artifact collection and provide clients examples of acceptable artifacts • Strong written and verbal communication skills, including explaining technical matters to non-technical audiences • Strong initiative, time management, and ability to meet deadlines • Strong consulting skills and ability to advise and challenge the status quo • Ability to build high-trust relationships and credibility quickly • High attention to detail • Ability to facilitate meetings with small or large groups • Bachelor's degree in IT or a related field, or equivalent combination of education and work experience • Ability to travel up to 20% • Networking, systems, or cloud security certifications are a bonus • Cloud computing experience, vulnerability scanner experience, and prior FedRAMP, FISMA, NIST 800-171, or other security framework experience are bonus qualifications

🏖️ Benefits

• Flexible work model allowing employees to choose when and where they work • Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options • Employee resource groups • In-person and virtual events • Equal opportunity and reasonable accommodation