Cybersecurity Analyst — RMF ATO & DoD IL-4

Paycom; Bethesda (MD); On-site; USD 95,000 - 130,000; Full time

Job summary

TIAG is hiring a Cyber Security Analyst to support USUHS in Bethesda, MD. The role focuses on modernizing RMF ATO packages for Google Cloud, Google Workspace, and ServiceNow GCC-High to IL-4.

You will craft narratives, manage POAMs, and ensure accurate control mappings in eMASS/ServiceNow environments. Required active DoD Secret clearance, IAM/IAT Level certifications, and 2+ years of cyber experience with RMF and control narratives.

Qualifications

• DoD 8140/8570 IAT Level II or IAM Level I equivalent certs required (Security+ CE, CASP/CGR C, SSCP etc).
• Experience writing control narratives and tracking POAMs in RMF ATO processes.
• Familiarity with RMF, NIST SP 800-53 Rev.5, and DoD IL-4 requirements.

Responsibilities

• Support RMF lifecycle from gap analysis to final ATO package closeout recommendations.
• Create and modernize RMF packages: SSP, SAR, POA&M, and Continuous Monitoring Plan.
• Draft control narratives reflecting actual system configurations (not generic baselines).
• Prepare and manage POA&Ms for identified gaps requiring remediation.
• Upload and map artifacts to Control Objectives in ServiceNow GRC.

Skills

IAT Level II / IAM Level I cert

RMF

DoD 8140/8570 familiarity

2+ years cyber security

ServiceNow GRC

eMASS / Xacta experience

HitL validation

Control narratives development

FedRAMP assessment familiarity

Tools

eMASS

Xacta

CSAM

ServiceNow GRC

Job description

TIAG is hiring a Cyber Security Analyst to support USUHS in Bethesda, MD. The role focuses on modernizing RMF ATO packages for Google Cloud, Google Workspace, and ServiceNow GCC-High to IL-4.

You will craft narratives, manage POAMs, and ensure accurate control mappings in eMASS/ServiceNow environments. Required active DoD Secret clearance, IAM/IAT Level certifications, and 2+ years of cyber experience with RMF and control narratives.