• Perform security hardening for client’s cloud environment • Implement necessary security measures for AI operations such as Data encryption in transit and at rest, Access control and identity management • Adhere to risk management principles in NIST AI Risk Management Framework and agency policy • Operate within FedRAMP(moderate) authorized services appropriate for the agency’s data • Comply with FISMA, implement controls aligned to NIST SP 800-53, adopt Zero Trust patterns (NIST SP 800-207), and ensure audit logging and continuous monitoring • Implement Zero Trust principles, least privilege, and role/persona-based access-controlled workspaces • Support Section 508 accessibility for user interfaces and documentation • Support clients ATO requirements • Provide an annual risk assessment on how security controls are being followed • Review and document the external systems security assessment report in the above-mentioned risk assessment on an annual basis