Skip to content
Consensus Cloud Solutions

Sr. Information Security Engineer, FedRAMP

US, Remote; US, RemoteRemote · United States
Senior · 000825-Infosec
POSTED 19 OCT
Apply Ask
Role
21 days opentrue age
Posted 19 Oct
Pay
$165k–$220kno pay posted
Market p25–p75
$165k–$220k
United States · n=266 · 365d to 6 Nov
CompanyConsensus Cloud Solutions →
12open roles
Opened · 30d
+0
Closed · 30d
−0
4d of snapshots · 30d window
Market
1,380open · Senior Security
Opened · 7d
+967% of open
All security
8,285open
All tracked boards · live 10 Nov · n=1,380
AWSDocker

Consensus Cloud Solutions is a publicly traded, leading digital cloud fax and interoperability solutions organization in the United States and globally, focusing on connecting and empowering healthcare providers, payers, care teams, and technology innovators to unify multiple systems that wouldn’t otherwise talk to each other. Consensus is a trailblazer in our industry and believes that data transformation will reshape the world of healthcare.

Founded over 25 years ago, Consensus leverages its technology heritage to move from simple digital documents to advanced healthcare standards (HL7/FHIR) for secure data transport, as well as Natural Language Processing (NLP) and Artificial Intelligence (AI) to convert unstructured to structured, analytics-ready data, helping users unveil information that is meaningful and actionable for better patient care.

Consensus leads the industry in data exchange solutions and we’re only getting started! With exciting new initiatives on the horizon, we are continuing our strategic expansion and we are looking to add to our diverse team of innovators.

Now is the ideal time to join us in our mission to solve healthcare’s biggest challenges, and work collaboratively with a diverse team of like-minded self-starters and partners to accomplish it.

Consensus Cloud Solutions is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive and equitable environment for all employees. We offer many remote and hybrid career opportunities.

How you will impact the organization…

The Senior Information Security Engineer for FedRAMP plays a vital role in maintaining the organization’s FedRAMP High compliance and overall cloud security posture. This position supports the mission of delivering secure, government-compliant services by leading Security Operations (SecOps) projects, managing technical operations, and ensuring compliance with NIST 800-53 Rev 5 standards. Key responsibilities include supporting the Annual 3PAO Assessment, managing OS patching for up to 350 servers, overseeing antivirus and backup solutions, and conducting regular vulnerability scans using tools such as Nessus and Burp Suite. The engineer will oversee endpoint security with FortiClient EMS, handle authentication with Okta for Government, and manage backups with N2WS. They will ensure SOC and technical support coverage, monitor logs and intrusions using Splunk, and conduct security assessments of AWS GovCloud. Additional duties include managing Active Directory user access reviews and access controls, supporting red team and penetration testing, assisting with security impact analysis (SIA), significant change requests (SCR), continuous monitoring (ConMon), and plans of action and milestones (POAMs) in coordination with the FedRAMP GRC team, and leading incident response and disaster recovery exercises. This role also involves mentoring other engineers and supporting change management and annual assessment preparation.

The value you will deliver…

  • Provide project management oversight of FedRAMP SecOps services.
  • Support Annual FedRAMP 3PAO assessments and security control validation.
  • Perform patch management for operating systems on up to 350 servers.
  • Manage antivirus solutions and ensure endpoint security using FortiClient EMS.
  • Oversee AWS backup and disaster recovery using N2WS Backup.
  • Conduct monthly vulnerability scans (OS, database, containers, web apps, STIG baseline) using Nessus and Burp Suite tools and provide reporting and analysis.
  • Perform rescans to confirm remediation of vulnerabilities.
  • Generate monthly security reports and conduct user access reviews.
  • Manage and test functional Disaster Recovery and Incident Response plans per NIST 800-53 Rev 5.
  • Operate and maintain SIEM tools such as Splunk for threat detection and correlation.
  • Ensure Security Operations Center (SOC) response SLAs.
  • Maintain technical support services with a 15-minute callback SLA.
  • Perform continuous log management and intrusion detection monitoring.
Source · Consensus Cloud SolutionsFirst seen 7 NovOriginal ↗