FedRAMP Compliance Control Design Engineer

GRC & Control Design Engineer – FedRAMP VDR/VER Compliance Location: Remote Employment Type: Contract Experience: 6+ Years Key Responsibilities Design and implement FedRAMP VDR/VER compliance controls and maintain a complete control-to-requirement traceability matrix. Develop vulnerability evaluation frameworks, accepted vulnerability workflows, and compliance documentation. Author policies, SOPs, control narratives, audit documentation, and SLA definitions. Validate FedRAMP JSON outputs, API responses, and compliance reports. Define evidence collection requirements and support 3PAO assessment readiness. Guide engineering teams on compliance impacts of technical implementation decisions. Required Skills 5+ years of experience in GRC, Security Compliance, or Audit with FedRAMP expertise. Hands-on experience with ATO, SSP, Continuous Monitoring, and 3PAO Assessments. Strong knowledge of vulnerability management, remediation SLAs, POA&M, and risk acceptance processes. Experience designing auditable security controls and compliance documentation. Ability to review APIs, JSON schemas, and architecture diagrams from a compliance perspective. Excellent documentation and policy writing skills. Preferred Skills FedRAMP 2026 VDR/VER Rules & CISA BOD 26-04 NIST SP 800-53, SSDF, NIST SP 800-190 OSCAL and FedRAMP JSON schemas Experience with compliance automation or tooling migration

Project ID: 40612336