Integrate vulnerability management tools with development workflows. Collaboration * Partner with ... Support security compliance requirements such as SOC2, FedRAMP, or DoD security standards where ...
Integrate vulnerability management tools with development workflows. Collaboration * Partner with ... Support security compliance requirements such as SOC2, FedRAMP, or DoD security standards where ...
... asset management, program management and thought leadership directly engaged with a myriad of ... Knowledge of Federal cybersecurity frameworks and requirements including NIST, RMF, FedRAMP, CMMC ...
New
... asset management, program management and thought leadership directly engaged with a myriad of ... Knowledge of Federal cybersecurity frameworks and requirements including NIST, RMF, FedRAMP, CMMC ...
New
IT - Engineer II
Mountain Home, AR · On-site
$50.50 - $69/hr
Design and manage automated build, test, and deployment workflows, ensuring reliability and ... Experience with compliance frameworks (FedRAMP, NIST, RMF). * Experience automating zero-downtime ...
IT - Engineer II
Mountain Home, AR · On-site
$50.50 - $69/hr
Design and manage automated build, test, and deployment workflows, ensuring reliability and ... Experience with compliance frameworks (FedRAMP, NIST, RMF). * Experience automating zero-downtime ...
Fedramp Program Manager information
What is a FedRAMP Program Manager?
A FedRAMP Program Manager is a professional responsible for overseeing and coordinating the process of achieving and maintaining Federal Risk and Authorization Management Program (FedRAMP) compliance for cloud service providers or government agencies. They manage documentation, security assessments, and communication with stakeholders to ensure all requirements are met according to federal standards. Their role is crucial for enabling secure cloud adoption within U.S. government agencies, as they guide the project through the FedRAMP authorization process from start to finish.
What are the key skills and qualifications needed to thrive as a FedRAMP Program Manager?
To thrive as a FedRAMP Program Manager, you need expertise in cloud security, risk management, compliance frameworks, and a solid understanding of FedRAMP requirements, usually backed by a degree in IT, cybersecurity, or a related field. Familiarity with tools like GRC (Governance, Risk, and Compliance) platforms, NIST SP 800-53 controls, and certifications such as CISSP or PMP is highly beneficial. Strong project management, stakeholder communication, and problem-solving skills set candidates apart in this role. These competencies are essential for guiding organizations through complex FedRAMP authorization processes and ensuring ongoing compliance with federal security standards.
What are the main challenges a FedRAMP Program Manager faces when coordinating compliance efforts across multiple teams?
A FedRAMP Program Manager often navigates complex challenges such as aligning cross-functional teams—including IT, security, legal, and operations—to meet rigorous federal cloud security requirements and tight deadlines. Coordinating documentation, ensuring continuous monitoring, and responding to security assessments demand strong project management and communication skills. Additionally, managing evolving compliance standards and liaising with external auditors or government representatives can add to the complexity. Success in this role depends on the ability to facilitate collaboration, maintain meticulous records, and quickly adapt to regulatory updates.
What is the difference between Fedramp Program Manager vs Cloud Security Manager?
| Aspect | Fedramp Program Manager | Cloud Security Manager |
|---|---|---|
| Certifications | FedRAMP certifications, PMP, CISSP | CISSP, CCSP, Cloud Security certifications |
| Work Environment | Federal agencies, cloud service providers, government projects | Private sector, cloud service providers, enterprise security teams |
| Industry Usage | Federal government compliance, cloud authorization | Cloud security strategy, risk management |
The Fedramp Program Manager primarily focuses on managing FedRAMP compliance and federal cloud authorization processes, often working within government or contractor environments. In contrast, the Cloud Security Manager oversees overall cloud security strategies and risk mitigation in private or enterprise settings. While both roles require cloud security knowledge and certifications like CISSP, their scope and industry focus differ significantly.
What are popular job titles related to Fedramp Program Manager jobs in Arkansas?
For Fedramp Program Manager jobs in Arkansas, the most frequently searched job titles are:
What job categories do people searching Fedramp Program Manager jobs in Arkansas look for?
The top searched job categories for Fedramp Program Manager jobs in Arkansas are:
What cities in Arkansas are hiring for Fedramp Program Manager jobs?
Cities in Arkansas with the most Fedramp Program Manager job openings:
$110K - $135K/yr
Full-time
Medical, Dental, Vision, Retirement
Re-posted yesterday
Job description
Role : DevOps Security Engineer ( US citizen)Location : Ogden, UTAH ( 100% Onsite role., NO REMOTE )
*** US Citizens with current active clearance or who can obtain clearance in the future**
* Relocation assistance can be provided for the right candidate
Blue Yonder Defense Solutions (BYDS) is seeking a DevSecOps Engineer to help integrate security practices into our software development and DevOps processes. This role will work closely with development, QA, and operations teams to build and maintain secure CI/CD pipelines, automate security testing, and ensure our platforms and applications meet enterprise security standards.
The ideal candidate is passionate about automation, cloud-native security, and secure software delivery, and has experience embedding security into modern DevOps environments.
DevSecOps Implementation
- Design and implement security controls within CI/CD pipelines to ensure secure software delivery.
- Integrate automated security testing tools such as SAST, DAST, SCA, and container scanning.
- Embed security checks into build and deployment processes to identify vulnerabilities early in the SDLC.
Platform & Infrastructure Security
- Work with DevOps teams to secure cloud infrastructure, containers, and Kubernetes environments.
- Implement Infrastructure-as-Code security scanning and policy enforcement.
Automation & Tooling
- Develop automation scripts and integrations to support security workflows.
- Maintain and enhance CI/CD platforms and pipeline security tooling.
- Integrate vulnerability management tools with development workflows.
Collaboration
- Partner with developers and QA teams to promote secure coding practices.
- Assist engineering teams in remediating vulnerabilities identified during testing and scanning.
- Collaborate with internal and customer security teams to implement organizational security standards.
Compliance & Governance
- Support security compliance requirements such as SOC2, FedRAMP, or DoD security standards where applicable.
- Assist with security audits and vulnerability remediation tracking.
- Help maintain documentation of DevSecOps processes and controls.
Required Qualifications
- 3-6 years of experience in DevOps, DevSecOps, or security engineering.
- Experience building and maintaining CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI, or similar).
- Familiarity with cloud platforms such as AWS, Azure, or GCP.
- Experience with container technologies (Docker, Kubernetes).
- Understanding of secure software development lifecycle (SSDLC) practices.
- Experience integrating security tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Container vulnerability scanning
- Scripting experience (Python, Bash, or similar).
- Familiarity with Infrastructure as Code tools (Ansible, Terraform, CloudFormation, etc.).
Preferred Qualifications
- Experience implementing DevSecOps practices in enterprise software environments.
- Knowledge of container and Kubernetes security best practices.
- Experience with secrets management solutions (Vault, AWS Secrets Manager, Azure Key Vault).
- Familiarity with security frameworks such as NIST, CIS Benchmarks, OWASP Top 10
- Experience supporting government or regulated environments (FedRAMP, DoD Impact Levels, etc.).
- Security certifications such as Security+, CISSP (associate level), Certified Kubernetes Security Specialist (CKS)
Key Skills
- DevSecOps and secure SDLC
- CI/CD automation
- Cloud security
- Container and Kubernetes security
- Vulnerability management
- Infrastructure as Code
- Security tooling integration
Additional Skills
Must be well versed in working with a diverse group of stakeholders - business analysts, solution architects, technical managers, developers, QA, customer IT
Excellent communication (verbal and written) and interpersonal skills
Ability to work while embedded in customers' teams remotely
High degree of initiative and ownership to take a task and own it from inception to completion
Synonym title : Sr Software Engineer
#LI-SR1
-------------------------------------------
the salary range for this position - $110K - $135K
The salary range information provided, reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors. In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.
At Blue Yonder, we care about the wellbeing of our employees and those most important to them. This is reflected in our robust benefits package and options that includes:
Comprehensive Medical, Dental and Vision
401K with Matching
Flexible Time Off
Corporate Fitness Program
A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more
At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.
Our Values
If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success - and the success of our customers. Does your heart beat like ours? Find out here: Core Values
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.