C2 Labs is seeking an experienced FedRAMP SME to serve as a quality gate and advisor for our authorization acceleration and ConMon managed service work (FedRAMP 20X primary, with legacy Rev. 5 support as needed). This is an ideal role for a seasoned FedRAMP practitioner who enjoys coaching teams and improving deliverable quality. What you’ll do · QA and redline FedRAMP deliverables (20X KSI summaries and/or legacy SSP/policies/plans). · Validate evidence traceability and readiness prior to assessor/sponsor interactions. · Coach writers/consultants on FedRAMP documentation and common review pitfalls. · Help define internal quality standards and “definition of done” checklists. What we’re looking for · 8+ years experience delivering FedRAMP authorizations and/or ConMon (CSP, assessor/3PAO, advisory, or agency sponsor). · CISSP, CISM, or similar security certification · Deep knowledge of NIST 800-53 control intent, evidence expectations, and how to translate implementation into defensible narratives. · Strong technical editing and QA mindset; can turn complex feedback into clear, prioritized actions. · Comfort engaging with senior customer stakeholders, assessors, and GRC/engineering teams. · Ability to work independently and provide timely review cycles within delivery timelines. Nice to have · Bachelors degree in IT, Cybersecurity, or related field · Hands-on experience with FedRAMP 20X concepts (KSIs, pass/fail criteria, persistent validation cycles). · CISSP, CISM, or similar security certifications. · Experience with OSCAL and/or GRC automation platforms (RegScale preferred). · Experience supporting Azure Government or other government cloud environments. Engagement details · 1099 independent contractor (initial engagement); review-based cadence with surge capacity for major milestones. · Remote-first; occasional on-site support only if requested for workshops/assessments (rare). · No clearance required; must be able to pass a standard background check and sign NDA/SOW. · Flexible hours; responsive review turnaround is important.

• UiPath Expertise is Central to This Role • This engagement requires hands-on UiPath experience from day one. The QA Lead will lead a UiPath-based POC, build automation workflows on a UI-only enterprise platform, and coach client resources through tool adoption. • Serve as the primary QA consultant and lead for the engagement, providing strategic guidance and hands-on direction to both 3Pillar and client teams. • Advise client stakeholders on QA best practices, automation strategy, and tooling decisions — translating technical recommendations into clear, business-aligned direction. • Participate in backlog refinement, sprint ceremonies, release planning, and retrospectives. • Ensure QA work is clearly estimated, planned, and aligned with sprint deliverables. • Prepare QA status reports as a way to communicate test progress, test results, risks, and blockers with clarity and anticipation. • Complete the logging, tracking, communication and resolution of defects. • Maintain confidentiality, security and data privacy standards throughout all areas of responsibility. • Own the overall QA strategy across functional, regression, integration, and non-functional testing. • Define and maintain processes and best practices for test design, traceability, defect management, and environment usage. • Establish and monitor quality metrics that guide engineering decisions. • Balance coverage, speed, and maintainability while managing testing-related technical debt. • Design, build, and scale test automation frameworks for UI, API, and end-to-end testing. • Lead hands-on automation development demonstrating technical excellence and best practices. • Select appropriate tools, libraries, and patterns to ensure long-term stability and scalability. • Build, customize, deploy and manage the environments and test automation framework. • Design, implement, and maintain UiPath RPA automation workflows to support UI-driven test automation on enterprise platforms where backend API access is unavailable. • Integrate automation suites into CI/CD pipelines (e.g., smoke tests, regression packs, nightly executions). • Evaluate and introduce automation accelerators, optimizations, and emerging technologies (including AI-assisted testing). • Act as the main QA point of contact for the client, providing strategic recommendations and technical guidance. • Collaborate closely with Business Analysts to translate requirements, user stories, and acceptance criteria into actionable test scenarios and automation coverage. • Prepare and run in-person workshops, demos, discovery sessions, and planning sessions in Toronto. • Communicate proactively with Engineering, Product, Business, and UAT stakeholders. • Guide and mentor QA engineers, helping them grow in automation, exploratory testing, and technical thinking. • Partner with Business Analysts to support knowledge transfer, ensure test coverage aligns with documented requirements, and contribute to building internal QA capability within the client team. • Promote knowledge sharing and continuous learning practices.

Role Description Our craft reflects who we are. Craftable software specializes in systems that require quality, reliability, and scalability in a highly transactional environment. We rely on our craft and drive to solve these problems, while enjoying the journey. Our mission is to improve every system; functionality; task; with passion, care, skill, and experience, because we truly believe that quality requires craft. Should I apply? Yes, if you have an eye for detail and a passion for solving complex problems, just as much as for crafting software. We believe we are a great match. Qualifications - At least 3 years of professional experience as a QA Automation or a Software Engineer - Strong experience with automated tests, Web or Mobile - Experience with one of the following frameworks: JBehave, SpecFlow, cypress.io, Cucumber or Robot Framework - Comfortable with high-level programming, one of the following languages: Java, C#, NodeJS or Python - Awareness and understanding of Behaviour Driven Development - Experience with REST good practices in order to properly interact with APIs - Proficient with agile methodologies - Self-driven and motivated to work and design different test scenarios, scripts or procedures - Motivated to keep learning - English language proficiency Requirements - Continuous Integration - Continuous Deploy - Cloud Services - Search Engines - NoSQL - Distributed Message Queuing - Infrastructure as code - Machine learning - Containers Benefits - Health insurance (including dental & mental health), extendable to family - Meal allowance (€10.2 on a meal card) - Extra days off: Birthday + Municipal Holiday of choice - Brand-new monitors, high-spec computers, coffee, tea, fruit & snacks in our offices - Coworking access for employees outside Porto/Aveiro - Clear career progression - Regular training + Udemy & Pluralsight licenses - Resharper/Intellij, Visual Studio & other top-tier tools (for applicable roles) - Weekly sports: padel, basketball, running - Annual snow trip for winter sports & team bonding - Year-round celebrations & gatherings - Pet-friendly offices

• Review and validate user-submitted tasks in German and English (additional languages are a plus) • Assist with analyzing datasets and preparing reports and presentations for our clients • Collaborate with a motivated team to help improve our platform and business processes • Gain insight into an innovative, growing company with an international focus