What are the responsibilities and job description for the FedRAMP Cloud Security Project Manager position at InfusionPoints, LLC?
Job Description
Lead regulated cloud security projects from strategy through evidence.
The FedRAMP Cloud Security Project Manager works across customer environments to manage, provide subject matter expertise, and lead the design, build, and documentation of FedRAMP security controls in AWS and Azure environments.
The ideal candidate has experience managing the development of FISMA/FedRAMP System Security Plans for low, moderate, and high impact IaaS, PaaS, and SaaS solutions.
FedRAMPATO planning, package support, and control documentation.
AWS AzureCloud security experience across regulated environments.
5 yearsPreferred experience with FISMA/FedRAMP security plans.
Responsibilities
What this role does.
Lead FedRAMP project execution
- Manage projects and programs supporting authorization and compliance outcomes.
- Create and publish technical documentation associated with FedRAMP assessment packages.
- Guide customers toward achieving and maintaining a FedRAMP Authority to Operate.
Bring security and cloud expertise
- Apply knowledge of AWS, Azure, network security, application security, infrastructure hardening, web server security, and database security.
- Stay current on U.S. policy related to information assurance, acquisition, and computer network defense.
- Communicate effectively across technical teams, customers, and leadership.
Qualifications
Experience that helps you succeed.
- 3 years managing projects and/or programs.
- Experience obtaining and maintaining compliance certifications such as FedRAMP preferred.
- Cloud infrastructure and software development lifecycle experience preferred.
- Excellent decision-making, analytical, problem-solving, presentation, and customer research skills.
- BS/BA degree preferred.
- Preferred certifications include PMP, CISSP, CISM, CEH, CISA, Security , GSEC, CIPP, AWS, or Azure certifications.
Apply your expertise
Help customers move from uncertainty to authorization-ready proof.