Brian Ruf
Washington DC Metro Area, United States
Summary
🤩
RockstarBrian Ruf is an experienced cybersecurity and IT leader with over three decades of hands-on and executive experience, currently consulting as Owner of Ruf Risk to help organizations adopt OSCAL for automation and continuous authorization. He co-created the NIST OSCAL specification and the OSCAL REST OpenAPI spec, blending standards-level influence with practical FedRAMP and cloud security delivery across federal, healthcare, telecom, and financial sectors. Brian has led major modernization and authorization efforts—ranging from FAA air traffic control projects to FedRAMP orchestration for agencies and vendors—and built teams that achieved complex compliance outcomes for Cisco, Customs and Border Protection, and the Nuclear Regulatory Commission. He combines strategic vision and fiscal discipline with deep technical expertise in enterprise architecture, risk management, and process improvement (ISO-9001, SE-CMM), and is known for turning compliance frameworks into automatable, mission-enabling workflows. Based in Aldie, Virginia, he frequently bridges government and industry needs, advising FedRAMP PMO, contractors, and OSCAL tool developers on pragmatic adoption that reduces risk and accelerates authorization.
8 years of coding experience
Github Skills (19)
json10
nist10
ssp10
xsd10
sar10
sap10
security10
automation10
authorization10
yaml10
xml10
compliance10
schema10
xslt9
xquery9
Programming languages (10)
Github contributions (5)
brian-ruf/OSCAL-GUI
Aug 2019 - Feb 2020
Joint NIST/FedRAMP tool to interact with OSCAL files via a browser-based GUI
Contributions:59 commits, 21 PRs, 46 pushes in 5 months
oscalpythongui-basedbrowsernist
brianrufgsa/fedramp-automation
Dec 2019 - Feb 2021
FedRAMP Automation
Contributions:81 pushes, 20 branches in 1 year 2 months
automation
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.