FedRAMP director put on admin leave after veterans’ hiring preference comments

TL;DR

GSA (General Services Administration)’s FedRAMP (Federal Risk and Authorization Management Program) director, Pete Waterman, has been placed on administrative leave after publicly criticizing veterans’ hiring preferences, creating immediate leadership uncertainty for the federal cloud security authorization program. Waterman had also been slated to become acting director of GSA’s Technology Transformation Services (TTS), raising continuity questions across both FedRAMP operations and broader GSA technology initiatives. This personnel disruption may slow FedRAMP authorization timelines and affect policy direction for cloud service providers pursuing agency authorizations. Contractors targeting federal cloud work should expect heightened review cycles and possible temporary changes to FedRAMP priorities while GSA determines interim leadership. Monitor communications from GSA and FedRAMP closely; adjust capture plans and opportunity pipelines to account for slippage or reprioritization. Use intelligence feeds to rescore affected pursuits and prepare to respond rapidly to revised FedRAMP guidance.

Key Points

• What happened: GSA’s FedRAMP director, Pete Waterman, was placed on administrative leave after publicly criticizing veterans’ hiring preferences, creating leadership uncertainty in FedRAMP and TTS.
• Who is affected: NAICS 518210, 541512, 541513, 541519, 541511, 541990; agencies GSA and TTS; contract vehicles GSA Schedules, 8(a) STARS III, OASIS+, Alliant 2; market segments Cloud Services, Cloud Security, IT Services, SaaS, PaaS, IaaS; compliance surfaces FedRAMP, NIST 800-53, FISMA.
• Timeline: Timeline TBD pending source review.
• What contractors should do NOW: 1) Pause assumptions about near-term FedRAMP schedule certainty and flag active authorizations for potential delays; 2) Re-evaluate capture priorities where FedRAMP authorization is a gating item; 3) Increase monitoring of GSA/FedRAMP announcements and contracting officer communications; 4) Prepare contract risk briefings for proposals and existing task orders.

Who Is Affected

Affected segments include the listed NAICS codes, agencies, contract vehicles, market segments, and compliance regimes provided in segmentation. Specific NAICS codes, agencies, and contract vehicles pending source review for follow-on details in individual solicitations and task orders.

Frequently Asked Questions

Q: Will FedRAMP authorization timelines be delayed?

A: The Summary indicates this personnel disruption may impact authorization timelines. Specific schedule impacts and duration of any delays are Pending source review.

Q: Who is leading FedRAMP during this administrative leave?

A: The Summary states Pete Waterman has been placed on administrative leave and that he was slated to become acting director of TTS; it does not identify an interim FedRAMP leader. Interim leadership details are Pending source review.

Q: Should contractors pause submissions or rework compliance investments?

A: Contractors should not automatically pause submissions but should reassess risk and timing for FedRAMP-dependent pursuits, prioritize critical authorizations, and maintain readiness to adjust bids if GSA issues guidance. Specific program instructions from GSA/FedRAMP are Pending source review.

Definitions

• FedRAMP: The federal program for standardizing security assessment, authorization, and continuous monitoring for cloud products and services.
• Administrative leave: A temporary leave status during which an employee is relieved of duties pending further action or investigation.
• Technology Transformation Services (TTS): A GSA organization focused on improving federal technology and digital services (as referenced in the Summary).

Intelligence Response

• Which Cabrillo products to leverage:
• Cabrillo Signals War Room — Already detected this event and delivered this briefing; use it to receive real-time alerts on leadership changes and policy signals affecting FedRAMP.
• Cabrillo Signals Match Engine — Rescore opportunity pipelines and adjust pursuit priorities where FedRAMP authorization risk increases.
• Cabrillo Signals Intelligence Hub — Track affected agencies, NAICS codes, and the listed contract vehicles; run saved searches to alert on follow-on solicitations or GSA notices.
• Proposal Studio (Proposal OS) and Proposal Studio Workflow Tracker — Update compliance matrices, refresh win themes for affected pursuits, and route capture/proposal tasks through the 9-gate workflow with audit-ready documentation.
• Who to notify in your organization:
• Capture Manager — to reassess live pursuits and bid/no-bid decisions.
• BD/BD Director — to reprioritize pipeline and client communications.
• Security/Compliance Lead — to review FedRAMP milestones and evidence readiness.
• Proposal/Program Manager — to adjust schedules and client deliverables.
• CTO/Engineering Lead — to confirm technical readiness for any expedited authorizations.
• First 48-hour response playbook:
• Hour 0–4: Confirm receipt of this briefing with executive leadership and notify Capture Manager, BD Director, Security Lead, and Proposal Lead. Triage active FedRAMP-dependent pursuits.
• Hour 4–12: Run Cabrillo Signals Match Engine to rescore active opportunities; use Intelligence Hub saved searches to flag any GSA/FedRAMP notices. Prepare an internal risk memo for each high-priority pursuit.
• Hour 12–24: Convene a capture sync to adjust timelines and assign owners for outreach to agency points-of-contact. Update Proposal Studio compliance matrices for at-risk pursuits.
• Hour 24–48: Finalize revised capture timelines, escalate any client-impacting schedule slips, and schedule daily monitoring through Cabrillo Signals War Room until interim leadership is confirmed.

Related reading: Secure Operations Guide (/insights/secure-operations-guide)

Related guides: CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide), CUI (Controlled Unclassified Information)-Safe CRM Guide (/insights/cui-safe-crm-guide)