Note: The job is a remote job and is open to candidates in USA. PetraMED is a healthcare technology company providing an AWS-hosted, multi-tenant SaaS platform for healthcare organizations and government clients. The Cloud Platform & Compliance Readiness Consultant will independently assess the platform’s architecture, security practices, documentation, and operational processes against NIST 800-53 expectations. The consultant will review documentation and technical controls, evaluate compliance gaps and dependencies, and deliver an assessment, remediation roadmap, and executive-level findings presentation.
Responsibilities
- Review existing architecture, operational, security, and compliance documentation
- Conduct structured interviews with engineering and technical stakeholders
- Assess documentation coverage against NIST 800-53 expectations
- Review the AWS environment using read-only access
- Develop a system inventory and define the authorization boundary
- Review identity, access controls, permissions, and privilege levels
- Assess backup, recovery, and business continuity practices, including restore testing
- Review CI/CD, change management, and release processes
- Evaluate secrets management, logging, and monitoring practices
- Identify and map third-party services and subservice dependencies
- Software supply chain review, including code provenance and third-party, open-source, and reused components
Skills
- • Must currently reside in the United States
- • Demonstrated experience with NIST 800-53
- • Strong experience with AWS security architecture and cloud environments
- • Experience assessing SaaS or multi-tenant cloud platforms
- • Experience preparing documentation capable of withstanding third-party assessor scrutiny
- • Experience conducting FedRAMP, GovRAMP, HIPAA, and/or SOC 2 readiness assessments
- • Strong knowledge of identity and access management, security logging, secrets management, backup, recovery, and business continuity
- • Experience reviewing CI/CD, change management, and software release processes
- • Ability to communicate effectively with both engineering teams and executive leadership
- • Relevant cloud, cybersecurity, or compliance certifications
Company Overview