Sr. Information Security Engineer, FedRAMP

Consensus Cloud Solutions is a publicly traded, leading digital cloud fax and interoperability solutions organization in the United States and globally, focusing on connecting and empowering healthcare providers, payers, care teams, and technology innovators to unify multiple systems that wouldn’t otherwise talk to each other. Consensus is a trailblazer in our industry and believes that data transformation will reshape the world of healthcare.
Founded over 25 years ago, Consensus leverages its technology heritage to move from simple digital documents to advanced healthcare standards (HL7/FHIR) for secure data transport, as well as Natural Language Processing (NLP) and Artificial Intelligence (AI) to convert unstructured to structured, analytics-ready data, helping users unveil information that is meaningful and actionable for better patient care.
Consensus leads the industry in data exchange solutions and we’re only getting started! With exciting new initiatives on the horizon, we are continuing our strategic expansion and we are looking to add to our diverse team of innovators.
Now is the ideal time to join us in our mission to solve healthcare’s biggest challenges, and work collaboratively with a diverse team of like-minded self-starters and partners to accomplish it.
Consensus Cloud Solutions is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive and equitable environment for all employees. We offer many remote and hybrid career opportunities.
How you will impact the organization…
The Senior Information Security Engineer for FedRAMP plays a vital role in maintaining the organization’s FedRAMP High compliance and overall cloud security posture. This position supports the mission of delivering secure, government-compliant services by leading Security Operations (SecOps) projects, managing technical operations, and ensuring compliance with NIST 800-53 Rev 5 standards. Key responsibilities include supporting the Annual 3PAO Assessment, managing OS patching for up to 350 servers, overseeing antivirus and backup solutions, and conducting regular vulnerability scans using tools such as Nessus and Burp Suite. The engineer will oversee endpoint security with FortiClient EMS, handle authentication with Okta for Government, and manage backups with N2WS. They will ensure SOC and technical support coverage, monitor logs and intrusions using Splunk, and conduct security assessments of AWS GovCloud. Additional duties include managing Active Directory user access reviews and access controls, supporting red team and penetration testing, assisting with security impact analysis (SIA), significant change requests (SCR), continuous monitoring (ConMon), and plans of action and milestones (POAMs) in coordination with the FedRAMP GRC team, and leading incident response and disaster recovery exercises. This role also involves mentoring other engineers and supporting change management and annual assessment preparation.
The value you will deliver…
Provide project management oversight of FedRAMP SecOps services.
Support Annual FedRAMP 3PAO assessments and security control validation.
Perform patch management for operating systems on up to 350 servers.
Manage antivirus solutions and ensure endpoint security using FortiClient EMS.
Oversee AWS backup and disaster recovery using N2WS Backup.
Conduct monthly vulnerability scans (OS, database, containers, web apps, STIG baseline) using Nessus and Burp Suite tools and provide reporting and analysis.
Perform rescans to confirm remediation of vulnerabilities.
Generate monthly security reports and conduct user access reviews.
Manage and test functional Disaster Recovery and Incident Response plans per NIST 800-53 Rev 5.
Operate and maintain SIEM tools such as Splunk for threat detection and correlation.
Ensure Security Operations Center (SOC) response SLAs.
Maintain technical support services with a 15-minute callback SLA.
Perform continuous log management and intrusion detection monitoring.
Conduct configuration consistency checks and quarterly authorized software reviews.
Manage AWS GovCloud security groups and access control list reviews.
Administer Active Directory account creation, password resets, and YubiKey setup.
Manage user access for production and pre-production systems, as well as security tools.
Support and validate annual penetration testing and red team exercises.
Conduct continuous monitoring (ConMon) and FedRAMP validation scans.
Collaborate with the GRC team to manage and resolve SIAs, SCRs, and POAMs.
Participate in Incident Response and Disaster Recovery testing activities.
Contribute to Annual Assessment preparation and Significant Change Management reviews.
Mentor and guide other security engineers.
Assist with evaluating security tools and conducting proof-of-concept testing for new technologies.
Support internal and external security audits beyond FedRAMP (e.g., SOC 2, HITRUST, PCI, etc.).
Provide input on security policies