Federal Security Consultant

Job Location :

Washington DC (remote)

Job Summary :

The Federal Security Consultant will serve as a key member of the transformation team ensuring that SAP Concur and related cloud solutions achieve and sustain FedRAMP Authorization to Operate (ATO). This role bridges enterprise security architecture compliance engineering and federal risk management frameworks in a complex multi-agency program.

Duties and Responsibilities :

Duties will include but may not be limited to :

Lead the planning and execution of FedRAMP ATO activities for SAP Concur and aligned SaaS platforms used in the modernization program.

Develop review and maintain system security documentation including SSPs POA&Ms and related artifacts per NIST SP 800-53 and 800-37 guidelines.

Interface with GSA IT Security agency ISSOs and SAP Cloud Compliance teams to align controls evidence and risk assessments.

Conduct continuous monitoring and controls assessment to sustain authorization.

Define and communicate security architecture strategies compatible with multi-tenant and hybrid cloud environments.

Evaluate vendor security postures and integration security impacts for connected applications.

Support internal and external audits coordinating responses and remediation activities across functional teams.

Advise project managers and technical leads on secure configuration baselines and policy compliance.

Requirements

Minimum Qualifications / Experience :

Minimum 5 years of experience in federal cybersecurity including at least 3 years in FedRAMP FISMA or related authorization frameworks.

Deep familiarity with NIST SPand 800-37 RMF.

Solid understanding of security architecture for cloud SaaS solutions (preferably SAP Concur Mulesoft or similar platforms).

Experience with vulnerability management incident response and security operations.

Strong written and verbal communication skills for interfacing with Federal stakeholders.

Preferred Qualifications :

CISSP CISM or FedRAMP 3PAO experience.

Experience supporting GSA DHS or other civilian agencies in large-scale digital modernization projects.

Prior involvement in cloud migration or ERP cloud security initiatives.

What Youll Deliver :

Secure compliant SAP Concur implementation aligned with GSAs transformation milestones.

Comprehensive ATO documentation and control validation evidence.

A sustainable framework for ongoing monitoring and risk management across participating agencies.

Minimum Education :

Bachelors Degree in Information Security Computer Science or related field. Masters Degree preferred.

Required Certifications :

CISSP or CISM Certifications Preferred.

Other :

Must be US Citizen with ability to obtain Public Trust Clearance.

Must be willing to travel to Washington DC on occasion.

Required Skills :

Minimum 5 years of experience in federal cybersecurity including at least 3 years in FedRAMP FISMA or related authorization frameworks. Deep familiarity with NIST SPand 800-37 RMF. Solid understanding of security architecture for cloud SaaS solutions (preferably SAP Concur Mulesoft or similar platforms). Experience with vulnerability management incident response and security operations. Strong written and verbal communication skills for interfacing with Federal stakeholders. Preferred Qualifications : CISSP CISM or FedRAMP 3PAO experience. Experience supporting GSA DHS or other civilian agencies in large-scale digital modernization projects. Prior involvement in cloud migration or ERP cloud security initiatives.

Key Skills

ISO 27001,B2B Sales,SafeNet,IDS,Risk Management,PCI,NIST Standards,Salt,Information Security,Customer relationship management,Encryption,FISMA

Employment Type : Full Time

Experience : years

Vacancy : 1