{"id":1122468,"url":"https://alion.io/job/agiloft-senior-fedramp-program-manager","title":"Senior FedRamp Program Manager","company":{"id":7870,"name":"Agiloft","domain":"agiloft.com","url":"https://alion.io/company/agiloft","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Management","role_family":"Management","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":184000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":832},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"FedRAMP","optional":false}],"status":"live","first_seen_at":"2026-09-22T17:20:56Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-27T18:59:44Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"Position Overview\nThe FedRAMP Program Manager serves as the day-to-day owner of the company’s responsibilities within a partner-managed FedRAMP environment. This individual translates FedRAMP, NIST SP 800-53, assessment, and external-partner requirements into clear internal actions; coordinates evidence and remediation activities across functional teams; manages deadlines and shared-responsibility dependencies; and independently evaluates whether company work, remediation responses, and evidence are sufficiently complete and responsive for submission to external FedRAMP partners, assessors, or other stakeholders. The role works with limited day-to-day supervision under the direction of the Director of Security and Compliance, establishes the operating structure needed to keep the program moving, and provides timely visibility into program status, risks, blockers, and required decisions.\nThis is an individual-contributor program execution and subject-matter-expert role; it does not perform engineering implementation or technical remediation. Strong performance in this role results in a FedRAMP program that remains organized, assessment-ready, and on schedule, with clear ownership, reliable evidence, timely remediation, and emerging risks addressed before they become compliance blockers.\nJob Responsibilities\nFedRAMP Program Execution\nOwn day-to-day execution of the company side of the FedRAMP program, including milestones, dependencies, risks, deadlines, and internal follow-through.\nTranslate FedRAMP requirements, findings, partner requests, and service-level commitments into clear internal actions with defined owners, due dates, evidence expectations, and acceptance criteria.\nMaintain an authoritative view of program status and proactively identify work that may threaten assessment, remediation, continuous-monitoring, or other FedRAMP deadlines.\nAssess overall program readiness and proactively identify systemic gaps in controls, evidence, ownership, processes, or dependencies that could jeopardize FedRAMP objectives\nOperate independently within established direction by determining required next actions, establishing priorities and deadlines, resolving routine program and ownership issues, and escalating material risks, disputed requirements, risk-acceptance decisions, missed commitments, or matters requiring management, partner, or specialized technical intervention.\nLeverage approved AI-enabled tools and automation to improve the efficiency and quality of program activities while independently validating outputs against authoritative requirements and program context\nEvidence, Controls, and Remediation Coordination\nCoordinate implementation and ongoing operation of organizational and procedural controls retained by the company, including identifying and working with appropriate internal control owners.\nCoordinate company inputs into partner-managed FedRAMP records, including control narratives, evidence, remediation information, and other required program documentation.\nCollect and review evidence for completeness, accuracy, relevance, currency, traceability to applicable controls or findings, and consistency with documented FedRAMP and partner requirements before submission.\nAct as the company-side quality gate for evidence and remediation responses, independently rejecting incomplete or inadequate submissions and requiring correction before external submission while escalating interpretation disputes or questions of external acceptance when appropriate.\nTrack findings from initial assessments, continuous monitoring, and other authorized testing through assignment, remediation, evidence submission, and closure.\nEstablish internal remediation deadlines, with management input as appropriate, based on external deadlines, service-level requirements, risk, and program dependencies.\nCross-Functional and Partner Coordination\nServe as the primary operational interface with the company’s external FedRAMP infrastructure and compliance partner.\nParticipate in partner-led continuous-monitoring meetings and ensure resulting actions, findings, requests, and decisions are communicated, assigned, tracked, and completed internally.\nWork closely with Software Engineering and Cloud Engineering to communicate technical compliance requirements, remediation expectations, deadlines, and required evidence without performing the technical remediation directly.\nCoordinate with Security, IT, Support, Operations, Product, Legal, and leadership on organizational controls, process changes, customer or contractual considerations, and other FedRAMP-related obligations.\nDrive commitments across teams that do not report directly to the role through clear requirements, follow-through, escalation, and accountability.\nEngage appropriate technical or functional subject-matter experts when specialized validation is required and ensure their conclusions are reflected in the program record.\nScope, Change, and Program Governance\nMaintain clarity over FedRAMP-in-scope users, systems, workflows, integrations, organizational processes, control inheritance, and shared-responsibility boundaries.\nMaintain clear understanding of which obligations are retained by the company versus operated, inherited, or evidenced by external partners.\nCoordinate review of proposed product, infrastructure, operational, or process changes that may affect FedRAMP scope, documented behavior, or control responsibilities.\nCoordinate delivery and maintenance of required compliant system artifacts, including the approved operating-system image, by the teams responsible for engineering and implementation.\nIdentify gaps or ambiguity in responsibility between the company and external partners and drive resolution before those gaps create compliance or delivery risk.\nRecommend program priorities and corrective actions based on FedRAMP requirements, organizational readiness, risk, external dependencies, and authorization objectives\nProvide FedRAMP subject-matter input to Product, Legal, and other stakeholders, distinguishing documented requirements from partner preferences, interpretation questions, and internal risk decisions.\nContinuously improve FedRAMP processes, documentation, evidence practices, ownership models, and operating routines to create a sustainable and repeatable compliance program\nReporting and Escalation\nProvide concise, decision-ready reporting to the Director of Security and Compliance on program status, upcoming deadlines, open findings, remediation progress, evidence quality, partner dependencies, and material risks.\nEscalate early when a missed or threatened deadline, disputed requirement, repeated quality failure, unresolved ownership issue, or external dependency requires management or executive intervention.\nClearly identify decisions requiring management, risk-owner, partner, legal, or specialized technical input rather than allowing unresolved issues to delay program execution.\nOther duties as assigned\nRequired Qualifications\n7+ years of relevant professional experience in security, compliance, technical program management, risk management, cloud security, or related disciplines, including at least 3 years of direct FedRAMP program execution or ownership experience.\nDemonstrated ownership of a substantial portion of at least one FedRAMP authorization lifecycle, including activities such as readiness or gap assessment, control implementation and evidence readiness, assessment support, findings or POA&M remediation, authorization activities, and transition into continuous monitoring.\nExperience operating a FedRAMP program after authorization, including continuous monitoring, recurring evidence collection, remediation deadlines, scope or significant-change considerations, and assessment preparation.\nStrong working knowledge of NIST SP 800-53 and the FedRAMP Moderate baseline, including the ability to interpret controls, implementation statements, control inheritance, shared responsibility, assessment findings, and evidence requirements.\nExperience operating within cloud or compliance shared-responsibility models, including identifying control ownership, inherited versus customer responsibilities, evidence dependencies, and gaps between provider and customer obligations.\nDemonstrated ability to translate FedRAMP requirements into clear, actionable expectations, owners, deadlines, evidence requirements, and acceptance criteria for technical and non-technical teams.\nExperience evaluating whether evidence and remediation responses adequately address stated control requirements or findings, including the judgment to reject inadequate company submissions before external review.\nDemonstrated ability to drive remediation and compliance commitments across Software Engineering, Cloud or Platform Engineering, IT, Security, Support, Product, and other teams without direct management authority.\nWorking technical knowledge of SaaS and cloud environments sufficient to understand and discuss identity and access management, CI/CD and deployment paths, vulnerability management, logging and monitoring, system boundaries, encryption, change management, software dependencies, and cloud infrastructure.\nAbility to recognize when specialized technical validation is required and engage the appropriate subject-matter experts rather than serving as the hands-on implementer.\nDemonstrated ability to independently establish program structure, determine required next actions from regulatory and partner requirements, resolve ambiguous ownership, establish priorities and deadlines, and appropriately escalate matters requiring management, risk-owner, partner, or technical-specialist decisions.\nExperience effectively leveraging AI-enabled tools, automation, or other advanced systems to improve productivity, analysis, and program execution, with demonstrated judgment in validating outputs and determining when human or subject-matter-expert review is required.\nStrong written and verbal communication skills, including the ability to communicate requirements, deficiencies, risk, program status, and decisions clearly to engineers, business stakeholders, external partners, assessors, and leadership.\nMust be a U.S. Person and reside in the United States.\nPreferred Qualifications\n5+ years of direct FedRAMP program execution experience and/or experience owning multiple authorization lifecycles.\nExperience independently leading company-side execution through a FedRAMP authorization lifecycle, including establishing program structure, driving organizational readiness, coordinating assessment activities, and transitioning into continuous monitoring\nExperience operating in a fully self-managed FedRAMP environment, particularly for a SaaS or cloud software provider.\nExperience in a partner-managed FedRAMP implementation where the candidate owned company-side execution, evidence quality, remediation tracking, control ownership, and shared-responsibility coordination.\nExperience working directly with FedRAMP assessors, 3PAOs, agency or authorization stakeholders, managed hosting providers, or other external authorization and compliance partners.\nExperience supporting FedRAMP scope, authorization-boundary, significant-change, change-management, or continuous-monitoring decisions in a SaaS or cloud environment.\nExperience coordinating remediation of security findings across software engineering, cloud or platform engineering, IT, and security teams without serving","description_format":"text","description_chars":11481,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Document Management","Legal Software","Procurement & Spend Management"],"lifecycle":[{"event":"open","at":"2026-09-22T19:39:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":167500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":47,"band":"ok","label":"Likely open","p_open":1,"p_active":0.855,"p_room":0.55,"age_days":34,"expected_fill_days":33,"reasons":["conf:0","win:tail"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/agiloft-senior-fedramp-program-manager","json_url":"https://alion.io/job/agiloft-senior-fedramp-program-manager.json","meta":{"generated_at":"2026-10-27T23:20:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15298,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7870},"rest":"https://alion.io/mcp/rest/get_company?id=7870"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fagiloft-senior-fedramp-program-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fagiloft-senior-fedramp-program-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fagiloft-senior-fedramp-program-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/agiloft-senior-fedramp-program-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fagiloft-senior-fedramp-program-manager"}]}