{"id":3347517,"url":"https://alion.io/job/northramp-llc-cloud-security-architect-ciso-support-rmf","title":"Cloud Security Architect, CISO Support (RMF)","company":{"id":682392,"name":"Northramp LLC","domain":"northramp.com","url":"https://alion.io/company/northramp","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":145000,"max_usd":259000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":114},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"ServiceNow","optional":true},{"name":"Splunk","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-27T17:40:15Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-02T21:21:06Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"The Cloud Security Architect supports the Chief Information Security Officer (CISO) on Call Order 1 of the Cloud Professional Support Services (CPSS) contract. The cloud broker has more than 1,000 customer environments in Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure. The Architect manages the Authorization to Operate (ATO) process under the NIST Risk Management Framework (RMF), maintains the controls that customer environments inherit from the broker, and reviews the security architecture of each new service before it is deployed.\nThe Architect works with the CISO, Authorizing Officials, system owners, Information System Security Officers (ISSOs), assessors, cloud engineers, and customer technical leads.\nResponsibilities\nCISO Support and ATO Management (RMF)\nManages the ATO process for the broker's authorization boundaries and for each customer environment onboarded to it: categorization under FIPS 199, control selection and tailoring, implementation, assessment, authorization, and continuous monitoring.\nPrepares and tracks System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and authorization decision packages.\nKeeps one schedule and one status report for every environment in the authorization process.\nDirects continuous monitoring: annual assessments, significant change reviews, POA&M closure, and vulnerability and configuration findings.\nBriefs the CISO and Authorizing Officials on authorization status, open risks, and risk acceptance requests.\nAligns packages to the Federal Information Security Modernization Act (FISMA), NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5, NIST SP 800-53A, FIPS 199 and 200, and the Federal Risk and Authorization Management Program (FedRAMP) baselines.\nCoordinates assessors, ISSOs, system owners, and engineers on evidence and schedule.\nInheritability\nDefines and maintains the catalog of controls that customer environments inherit from the broker's boundary, landing zones, and shared services in AWS, GCP, and Azure.\nMaintains customer responsibility matrices for each cloud service provider and service, tied to the provider's current FedRAMP authorization and to the federal regions it offers, such as AWS GovCloud (US), Azure Government, and Google Cloud Assured Workloads.\nBuilds reusable SSP sections, control narratives, and evidence templates so that a customer environment documents only the controls it implements itself.\nReviews each onboarding request to confirm which controls the environment inherits and which it owns.\nReports the share of controls inherited per environment and the time from onboarding request to authorization decision.\nSecurity Architecture Input Before Deployment\nReviews each new service before deployment: data flows, authorization boundary, identity and access, network segmentation, encryption with FIPS 140 validated modules, logging, and vulnerability management.\nWorks with customer technical leads and cloud engineers during onboarding to select the cloud service provider and product stack that meet the customer's requirements and the security controls.\nWrites a security architecture decision for each new service that lists the required controls, the inherited controls, and the residual risk, before the build starts.\nWrites reference architectures and guardrails for accounts, subscriptions, projects, landing zones, and policy as code in AWS, Azure, and GCP.\nDetermines whether a new service fits inside the authorized boundary or requires a significant change review.\nChecks the FedRAMP status of each cloud service before it enters the broker's service catalog.\nSits on the architecture and change review boards.\nRequirements\nBachelor's degree in information security, computer science, or a related field, or equivalent experience.\n6 years of information security experience, including 3 years on federal ATO packages under the NIST RMF.\nAuthored SSPs, SARs, and POA&Ms that an Authorizing Official accepted.\nWorking knowledge of the NIST SP 800-53 Rev. 5 control families and of common and inherited controls.\nHands-on security architecture experience in at least one of AWS, GCP, or Azure in federal environments, and working knowledge of the other two: account, subscription, and project structure, identity, network, encryption, and logging.\nExperience with FedRAMP authorized services, FedRAMP baselines, and customer responsibility matrices.\nExperience running threat models and architecture reviews with engineers.\nWritten and spoken communication with CISOs, Authorizing Officials, assessors, and engineers.\nOne of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or Certified Information Security Manager (CISM).\nEligible to work in the United States.\nPreferred Qualifications\nExperience supporting a multi-tenant cloud environment with hundreds of accounts and many customers.\nExperience building inherited control catalogs, reusable authorization packages, or automated control evidence, including Open Security Controls Assessment Language (OSCAL).\nExperience with governance, risk, and compliance (GRC) tools, ServiceNow, and Splunk for control evidence and monitoring.\nExperience writing policy as code and infrastructure as code guardrails, for example with Terraform.\nExperience moving a system boundary from FISMA Moderate to High.\nCertifications: Certified Authorization Professional (CAP), Information Systems Security Engineering Professional (ISSEP), Certified Information Systems Auditor (CISA), AWS Certified Security Specialty, Microsoft Certified Cybersecurity Architect Expert, or Google Professional Cloud Security Engineer.\nBenefits\nEmployee Bonus Programs\nMedical, Dental, and Vision Insurance\n401(k) Retirement Plan\nBasic Life, Voluntary Life, and AD&D Insurance\nShort-Term and Long-Term Disability Insurance\nPaid Time Off\nPaid Parental Leave\nTraining and Professional Development\nRemote Work Opportunities\nWellness Resources","description_format":"text","description_chars":6043,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Professional development","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-27T17:40:15Z"}],"visa":[],"liveness":{"score":73,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.767,"p_room":0.945,"age_days":5,"expected_fill_days":9,"reasons":["conf:2","velocity","win:mid"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/northramp-llc-cloud-security-architect-ciso-support-rmf","json_url":"https://alion.io/job/northramp-llc-cloud-security-architect-ciso-support-rmf.json","meta":{"generated_at":"2026-11-03T01:02:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1118,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":682392},"rest":"https://alion.io/mcp/rest/get_company?id=682392"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnorthramp-llc-cloud-security-architect-ciso-support-rmf"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnorthramp-llc-cloud-security-architect-ciso-support-rmf"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnorthramp-llc-cloud-security-architect-ciso-support-rmf"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/northramp-llc-cloud-security-architect-ciso-support-rmf\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnorthramp-llc-cloud-security-architect-ciso-support-rmf"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3347517}},{"tool":"search_jobs","arguments":{"company":"northramp.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3347517},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}