C2 Labs, Inc.

• Lead the GovCon practice; establish strategic objectives and KPIs • Oversee customer delivery; develop scalable methodologies and accelerators • Manage staffing, utilization, and budgets • Support capture and proposal activities; establish quality standards • Capture lessons learned; collaborate with the AI & Innovation team to integrate AI and Compliance Intelligence capabilities into delivery workflows • Manage and evolve service offerings including security authorization support, Civilian RMF, DoD RMF, Continuous Monitoring (ConMon), security authorization package development, security assessment support, OSCAL implementation, and Continuous Authority to Operate (cATO) services.

• Lead and scale the Advisory Services practice. • Develop service offerings, delivery methodologies, and operational standards. • Oversee the successful delivery of advisory engagements. • Ensure projects are completed on time, within scope, and aligned with customer expectations. • Recruit, mentor, and develop consulting professionals. • Manage resource allocation, utilization, forecasting, and practice profitability. • Develop reusable templates, playbooks, and compliance accelerators.

• Deploy and manage AI platforms supporting enterprise copilots, AI agents, and digital workers. • Implement and maintain Retrieval-Augmented Generation (RAG) infrastructure. • Deploy and manage vector databases and enterprise knowledge systems. • Develop and maintain integrations with RegScale APIs and other enterprise platforms. • Integrate AI services with Microsoft Copilot Studio, Power Platform, Azure AI Services, OpenAI, Anthropic, and related technologies. • Develop automation workflows using Power Automate and API-first architectures. • Design and maintain cloud-native infrastructure supporting AI and automation workloads. • Manage Kubernetes, Docker, CI/CD pipelines, and Infrastructure as Code. • Implement secure deployment pipelines for regulated environments. • Support development of compliance automation workflows for evidence collection, POA&M management, and continuous monitoring. • Monitor AI platform performance, observability, logging, and operational health.

• Help design and deliver AI-powered solutions that improve operational efficiency, automation, and decision-making across regulated environments • Lead the architecture and implementation of enterprise AI capabilities • Design secure AI architectures for regulated environments • Implement AI governance and model security controls • Support FedRAMP, RMF, CMMC, and government compliance requirements • Develop reusable compliance intelligence and automation frameworks • Define and evolve enterprise AI platform strategy • Design scalable AI services, agent frameworks, and orchestration patterns • Evaluate and integrate emerging AI technologies • Design API-first architectures and workflow orchestration strategies • Integrate AI capabilities with Microsoft Copilot Studio, Power Platform, ServiceNow, Archer, eMASS, and Security and compliance tooling.

• Support drafting and formatting of SSP/KSI artifacts, policies, and plans • Collect and organize evidence; maintain traceability in RegScale • Maintain trackers for actions, evidence requests, and POA&Ms • Help compile monthly/quarterly ConMon reporting inputs

• Implement and tune cloud security controls (IAM, logging, vulnerability management, configuration baselines, incident readiness). • Configure security tooling and integrations to produce repeatable evidence for authorization and ConMon. • Support remediation and hardening workstreams, including vulnerability scan remediation support. • Help automate evidence exports/reporting inputs where feasible and keep operations sustainable post-authorization.

• Lead drafting of FedRAMP artifacts (20X KSI summaries and/or legacy SSP/policies/plans) and drive iterations to completion. • Maintain control/KSI-to-evidence traceability in RegScale and keep the evidence library audit-ready. • Partner with cloud architecture/security engineering resources to ensure technical accuracy. • Support assessor/sponsor readiness: walkthroughs, responses, and updates.

• Lead boundary definition and architecture workshops for FedRAMP-target systems. • Produce architecture diagrams and narratives that align to FedRAMP package expectations. • Advise on secure patterns for identity, encryption, logging/monitoring, vulnerability management, and recovery. • Support remediation planning and technical walkthroughs with assessors/sponsors when needed.

• QA and redline FedRAMP deliverables (20X KSI summaries and/or legacy SSP/policies/plans). • Validate evidence traceability and readiness prior to assessor/sponsor interactions. • Coach writers/consultants on FedRAMP documentation and common review pitfalls. • Help define internal quality standards and “definition of done” checklists.

• Support cloud service providers in FedRAMP authorization • Develop and maintain authorization artifacts • Conduct gap analyses and compliance readiness assessments • Perform internal control assessments and validation • Establish automated continuous monitoring processes