FedRAMP Compliance Control Design Engineer
Budget: ₹80,000 – ₹100,000 INR
GRC & Control Design Engineer – FedRAMP VDR/VER Compliance
Location: Remote
Employment Type: Contract
Experience: 6+ Years
Key Responsibilities
Design and implement FedRAMP VDR/VER compliance controls and maintain a complete control-to-requirement traceability matrix.
Develop vulnerability evaluation frameworks, accepted vulnerability workflows, and compliance documentation.
Author policies, SOPs, control narratives, audit documentation, and SLA definitions.
Validate FedRAMP JSON outputs, API responses, and compliance reports.
Define evidence collection requirements and support 3PAO assessment readiness.
Guide engineering teams on compliance impacts of technical implementation decisions.
Required Skills
5+ years of experience in GRC, Security Compliance, or Audit with FedRAMP expertise.
Hands-on experience with ATO, SSP, Continuous Monitoring, and 3PAO Assessments.
Strong knowledge of vulnerability management, remediation SLAs, POA&M, and risk acceptance processes.
Experience designing auditable security controls and compliance documentation.
Ability to review APIs, JSON schemas, and architecture diagrams from a compliance perspective.
Excellent documentation and policy writing skills.
Preferred Skills
FedRAMP 2026 VDR/VER Rules & CISA BOD 26-04
NIST SP 800-53, SSDF, NIST SP 800-190
OSCAL and FedRAMP JSON schemas
Experience with compliance automation or tooling migration
Location: Remote
Employment Type: Contract
Experience: 6+ Years
Key Responsibilities
Design and implement FedRAMP VDR/VER compliance controls and maintain a complete control-to-requirement traceability matrix.
Develop vulnerability evaluation frameworks, accepted vulnerability workflows, and compliance documentation.
Author policies, SOPs, control narratives, audit documentation, and SLA definitions.
Validate FedRAMP JSON outputs, API responses, and compliance reports.
Define evidence collection requirements and support 3PAO assessment readiness.
Guide engineering teams on compliance impacts of technical implementation decisions.
Required Skills
5+ years of experience in GRC, Security Compliance, or Audit with FedRAMP expertise.
Hands-on experience with ATO, SSP, Continuous Monitoring, and 3PAO Assessments.
Strong knowledge of vulnerability management, remediation SLAs, POA&M, and risk acceptance processes.
Experience designing auditable security controls and compliance documentation.
Ability to review APIs, JSON schemas, and architecture diagrams from a compliance perspective.
Excellent documentation and policy writing skills.
Preferred Skills
FedRAMP 2026 VDR/VER Rules & CISA BOD 26-04
NIST SP 800-53, SSDF, NIST SP 800-190
OSCAL and FedRAMP JSON schemas
Experience with compliance automation or tooling migration