Technical Program Manager- FedRAMP

Nexthink•Boston, MA

3h•$157,000 - $245,000•Hybrid

About The Position

We're looking for a FedRAMP Technical Program Manager to own day-to-day oversight and execution of Nexthink's FedRAMP and U.S. public sector compliance programs. This is a high-impact, cross-functional role responsible for driving FedRAMP and similar regulatory processes, keeping the authorized system operating effectively, coordinating evidence and control activities, and ensuring internal teams stay aligned on federal compliance priorities. You'll work closely with Security, Engineering, Product, Cloud Operations, Legal, Customer Success, Sales, and Executive stakeholders. You will also serve as a key point of coordination with customers, third-party assessors, consultants, cloud partners, and government stakeholders as Nexthink supports current FedRAMP needs and prepares for future initiatives such as FedRAMP Moderate, DoD IL5/IL6-aligned services, and other U.S. federal market requirements. This role is for someone who understands that successful federal compliance is not just documentation. It requires operating discipline, technical credibility, careful stakeholder management, and the ability to turn complex requirements into clear, executable programs.

Requirements

7+ years of experience in technical program management, security compliance, cloud governance, federal delivery, or related roles supporting regulated SaaS, cloud, or public sector environments
Strong working knowledge of FedRAMP processes, including authorization readiness, control implementation, evidence management, continuous monitoring, POA&M management, and assessment coordination
Good understanding of U.S. federal programs and compliance expectations, including how agencies, sponsors, assessors, consultants, and cloud service providers interact during authorization and post-authorization operations
Experience managing audits, assessments, or compliance programs involving frameworks such as FedRAMP, NIST 800-53, DoD SRG, FISMA, ISO 27001, SOC 2, or similar control regimes
Ability to understand cloud architecture, security boundaries, shared responsibility models, data flows, logging, access control, incident response, and change management well enough to engage credibly with technical teams
Experience working with public sector customers, systems integrators, resellers, government procurement channels, or federal security stakeholders is highly desirable
Exposure to DoD Impact Level environments, especially IL5/IL6, Azure Government/GCC High, AWS GovCloud, or similar sovereign/government cloud environments is a strong plus
Track record of driving complex, cross-functional initiatives where success depends on influence, coordination, documentation quality, and persistent follow-through
You are fluent in both compliance and technical language, able to discuss control implementation details with engineers and program status, risk, and business impact with executives and customers
You bring structure to ambiguity, turning broad federal requirements and audit expectations into clear plans, owners, timelines, and operating rhythms
You communicate clearly and calmly with customers, auditors, consultants, and internal stakeholders, especially when priorities conflict or timelines are tight
You are detail-oriented without becoming bureaucratic, knowing when documentation must be precise and when teams need practical guidance to keep moving
You build trust through accountability, follow-through, and good judgment, escalating early when risks require leadership attention
You are comfortable working in a growing program where processes are still maturing and where part of the role is to create the repeatable mechanisms that will scale

Nice To Haves

Experience working with public sector customers, systems integrators, resellers, government procurement channels, or federal security stakeholders is highly desirable
Exposure to DoD Impact Level environments, especially IL5/IL6, Azure Government/GCC High, AWS GovCloud, or similar sovereign/government cloud environments is a strong plus

Responsibilities

Own and drive FedRAMP program execution across the authorized environment, including governance routines, milestones, risks, evidence collection, remediation tracking, and continuous monitoring activities
Provide operational oversight for the FedRAMP system boundary, ensuring that system changes, control responsibilities, data handling expectations, and authorization commitments are understood and followed by the right teams
Coordinate FedRAMP processes across Security, Engineering, Product, Cloud Operations, Support, Legal, and Customer Success, translating compliance requirements into practical execution plans
Manage relationships with third-party assessment organizations, consultants, cloud service providers, and other external advisors, ensuring clear expectations, timely deliverables, and high-quality audit outcomes
Partner with customer-facing teams to support federal customer meetings, security reviews, compliance questionnaires, authorization discussions, and explanations of Nexthink's government cloud roadmap
Maintain and improve FedRAMP documentation, including program plans, control narratives, policies, procedures, POA&M inputs, customer-facing materials, and recurring compliance reporting
Track findings, risks, exceptions, and dependencies through closure, ensuring accountable owners, realistic deadlines, and transparent escalation when decisions or resources are needed
Support future public sector initiatives, including readiness planning for FedRAMP Moderate, DoD IL5/IL6 environments, agency-specific requirements, and related federal compliance frameworks
Help build repeatable operating mechanisms for a federal cloud program, including change governance, audit readiness, customer data handling reviews, incident coordination, and cross-functional readiness forums

Benefits

100% covered company benefits that consist of health, dental, vision as well as access to life insurance, long-term disability, and accidental death/personal loss coverage
Flexible Hours and unlimited vacation
11 company-paid holidays
3 extra days for volunteering
Hybrid work model that balances office and remote work, with structured onboarding to foster connections and team integration
Free access to professional training platforms to explore your interests and enhance your skills
Up to 16 weeks of paid leave for birthing parents/primary caregivers
6 weeks for secondary caregivers
401(k) plan featuring up to 4% company matching contributions, vesting immediately
Bonuses for referring successful hires after three months of continuous employment