[Hiring] Senior Consultant, FedRAMP 20X Advisory @Fortreum

Role Description

The Senior Consultant, FedRAMP 20x Advisory leads projects evaluating the security and compliance of client firms against regulatory and industry requirements and standards, as well as security best practices. This is an engineer-minded, hands-on role:

• Design solutions mapped to FedRAMP 20x Key Security Indicators (KSIs).
• Build validation approaches that demonstrate control satisfaction through code and automation rather than static documentation.
• Develop reports and documentation for clients.

Key Responsibilities

• Deliver gap analysis and detailed program recommendations for clients pursuing a regulatory or compliance milestone.
• Prepare for FedRAMP 20x Vulnerability Detection & Response (VDR).
• Advise on FIPS 140-2 / 140-3 Encryption.
• Develop & Maintain FedRAMP Authorization Boundary Diagram.
• Optimize Management Plane Tooling (SIEM, Vulnerability Management, etc.).
• Develop documentation such as a Security Decision Record (SDR) and Certification Package Overview (CPO).
• Design and implement client solutions mapped to FedRAMP 20x Key Security Indicators (KSIs), translating outcome-based requirements into technical architecture rather than narrative documentation.
• Build and support automated, code-based validation methods (scripts, APIs, Infrastructure-as-Code) so clients can demonstrate continuous control satisfaction instead of point-in-time screenshots.
• Track FedRAMP 20x releases and Change Requests (e.g., CR26) on an ongoing basis and translate new guidance into practical client recommendations.
• Use AI/ML tools to catalog Key Security Indicators and help clients and internal teams navigate evolving requirements efficiently.
• Advise CSPs on generating machine-readable visibility into their own compliance data, giving them stronger grounds to defend risk-based decisions to assessors.
• Establish and maintain positive collaborative relationships with clients and stakeholders.
• Advise clients on compliance activities and their desired outcomes.
• Lead project activities including preparation, review of documentation and artifacts, evaluation of procedures, and client interviews.
• Ensure quality products and services are delivered on time and within allotted hours.
• Continuous professional development in pursuing industry-specific certifications.
• Escalate client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue.
• Provide mentorship to team members.
• Interface with clients through the entire engagement, interacting with all levels of client organizations.
• Pursue industry-specific certifications and seek continuous professional development.
• This is a customer-facing role. Travel is expected to be limited in nature; however, you may be required to travel to client locations and deliver professional services.

Qualifications

• Bachelor’s Degree or equivalent job experience.
• 6+ years of professional services experience.
• 4+ years of FedRAMP experience or cloud security engineering experience.
• Working knowledge of FedRAMP 20x KSIs.
• Comfort using AI tools to interpret and organize regulatory requirements.
• Active GitHub or portfolio showing coding/cloud automation work.
• Proficient in Microsoft 365 product suite.
• Ability to be self-directed with little oversight.
• Ability to quickly assess new and leading-edge technologies and concepts.
• Ability to develop and maintain strong relationships with team members and clients.
• Comfortable supporting fast-paced team environments.
• Strong technical acumen with regards to cloud security.

Preferred Skills

• Experience with Infrastructure-as-Code (Terraform) and scripting/automation.
• Looking to achieve AWS Solutions Architect or Security Specialty (or Azure / GCP equivalent).
• Familiarity of testing in Cloud environments (previous 3PAO experience).
• Experience writing scripts or building integrations for continuous compliance monitoring/validation.
• Interest in deepening cloud engineering skills (AWS/Azure/GCP) beyond a compliance-only background.

Posted Salary Range

$150,000 - $193,000 annual salary

Benefits

• Competitive compensation package based on performance/outcomes.
• Medical insurance.
• Dental insurance.
• Vision insurance.
• 401K plan with a 4% match.
• Company paid short-term disability.
• Company paid long-term disability.
• Company paid AD&D and life insurance.
• Flex time off.
• Annual bonuses.
• Training stipends.
• Certification reimbursements.
• Access to over 30,000 free online training courses.
• Personal cell phone allowance.
• New hire and annual home office stipend.
• Spot awards.
• Eleven paid holidays.