Security Compliance (ATO) Specialist

Concept Plus, LLC

9d

About The Position

Concept Plus is seeking a Security Compliance (ATO) Specialist to ensure the client OCI/ExaCC and Cloudflare solutions meet FedRAMP High, NIST 800-53 r5, and HIPAA requirements, and supports continuous Authorization to Operate (cATO) processes across the program.

Requirements

• US Citizen
• Deep knowledge of FedRAMP High and NIST 800-53 r5.
• Experience with ATO / continuous ATO processes in federal environments.
• Cloud security assessment experience (OCI, AWS, or Azure).
• Familiarity with HIPAA and healthcare data protection.
• Ability to translate controls into actionable engineering guidance.
• 7+ years information security/compliance with 3+ years supporting federal ATO.
• Must satisfy client security requirements and obtain/maintain applicable client background investigation and clearance.

Nice To Haves

• Prior CMS ATO experience.
• Experience with GRC tooling and cloud-native security services (Cloud Guard).
• CISSP, CCSP, or CAP certification.

Responsibilities

• Map solution designs and configurations to FedRAMP High and NIST 800-53 r5 controls.
• Support continuous ATO activities: control assessment, POA&M management, and evidence collection.
• Advise architecture and engineering teams on compliant-by-design patterns and guardrails.
• Review IaC and cloud configurations for security control coverage.
• Support HIPAA and client security requirements and Section 508 compliance of deliverables.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed