Senior FedRAMP ISSO

Location: Remote - United States; occasional duties may be required outside standard working hours across multiple time zones.

Base salary: $128,000–$200,000 USD per year, depending on geographic location, knowledge, skills, and experience.

Company

hirify.global builds telemetry infrastructure and an AI platform that helps large enterprises manage and analyze telemetry for humans and AI agents.

What you will do

• Own the FedRAMP Moderate authorization, including the System Security Plan, continuous monitoring program, POA&M lifecycle, and agency relationships.
• Maintain and defend the SSP by documenting architecture, control implementations, operational changes, and approved automation or AI use.
• Manage findings from assessments, vulnerability scans, and internal reviews through remediation, reporting, and documented closure.
• Lead monthly and annual continuous monitoring, vulnerability triage, configuration reviews, incident reporting, and annual 3PAO assessments.
• Assess the security and compliance impact of new features, infrastructure updates, and AI capabilities.
• Partner with engineering, DevOps, security operations, legal, product, federal agencies, Authorizing Officials, and the FedRAMP PMO.

Requirements

• 5+ years of information security experience, including at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Working knowledge of NIST SP 800-53 Rev. 5 and the FedRAMP Ecosystem baseline.
• Experience authoring and maintaining large-scale System Security Plans, managing POA&Ms, leading continuous monitoring, and coordinating annual 3PAO assessments.
• Experience using automation, scripting, or AI tools to improve evidence collection, reporting, documentation review, or compliance workflows.
• Familiarity with cloud security, with AWS GovCloud strongly preferred; Azure Government or GCP experience is valued.
• Active CISSP, CAP/CGRC, or CISM certification and strong written communication skills.

Nice to have

• Experience with FedRAMP High, IL4, or IL5 baselines.
• Familiarity with OSCAL, automated compliance tooling, compliance-as-code, infrastructure-as-code security scanning, or DevSecOps integration.
• Experience evaluating AI/ML capabilities within a FedRAMP-authorized boundary and familiarity with the NIST AI Risk Management Framework.
• Experience with GRC platforms, DISA STIGs, or federal security clearance eligibility.

Culture & Benefits

• Remote-first work environment with collaboration across multiple time zones.
• Health, dental, vision, short-term disability, and life insurance.
• Paid holidays, paid time off, and fertility treatment benefits.
• 401(k), equity, and participation in the Corporate Bonus Program for eligible non-sales roles.
• Inclusive culture focused on collaboration, curiosity, and valuing differences.