Information System Security Officer, RMF Specialist

Boston Government Services; Oak Ridge (TN); Hybrid; USD 136,849 - 160,999; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Paid Vacation

401K

Long and Short-Term Disability

Job summary

Boston Government Services, LLC. (BGS) seeks an Information System Security Officer / RMF Specialist to support client system owners across the US. The role focuses on RMF lifecycle activities, artifact creation, evidence validation, and continuous monitoring to maintain authorization postures.

You will develop SSPs, BIA, CP/IRP templates, and other RMF artifacts, while coordinating with stakeholders and compliance teams to ensure accurate documentation and timely remediation of findings.

Qualifications

• Bachelor's degree or equivalent required.
• Experience with RMF, A&A, FISMA, NIST 800-53 Rev. 5, SSP development, POA&M tracking, and security documentation.
• Ability to work with system owners, technical teams, ISSOs, privacy stakeholders, and compliance teams.
• Strong attention to detail and high-quality authorization documentation.
• Familiarity with federal security tools, GRC systems, ticketing systems, artifact repositories, and evidence management.

Responsibilities

• Support RMF lifecycle activities including system authorization package development, security control documentation, evidence validation, continuous monitoring, POA&M tracking, and ATO maintenance.
• Develop, update, and maintain RMF artifacts (SSPs, BIAs, FIPS 199 categorizations, PTAs/PIAs, CMPs, e-Authentication, boundary diagrams).
• Assist with control scoping, tailoring, overlays, inheritance mapping, and evidence collection.
• Validate system-level evidence such as logs, screenshots, scan results, configuration records, and policy artifacts.
• Contribute to CPs, IRPs, ConMon Plans, RMF templates, checklists, and user guides.
• Track POA&M, monitor remediation progress, and advise on corrective actions to reduce risk.
• Support FedRAMP package reviews and identify customer responsibilities for cloud systems.
• Maintain RMF content, process guides, SharePoint materials, and training content.

Skills

RMF

A&A

FISMA

NIST 800-53 Rev. 5

SSP development

POA&M tracking

security documentation

GRC tools

ticketing systems

artifact repositories

evidence management

federal security tools

stakeholder collaboration

Education

Bachelor's degree or equivalent

Security+, CISSP, CAP/CGRC, CISA, CISM, or equivalent RMF/security certification

Job description

Boston Government Services, LLC. (BGS) has created this Evergreen Talent Pool post for gathering qualified candidates for a position relating to Information System Security Officer-RMF Specialist to support our clients in various locations across the US.

BGS is an engineering, technology, and security firm helping to advance missions of national importance for government programs, national laboratories, national security facilities, nuclear operations, and complex projects. We support clients at every stage, from strategic planning and program management to the execution of engineering and technical activities. We work to attract and retain the best talent because the best talent delivers the best results for our clients. Our capabilities are based on our experience in complex, secure, and highly regulated environments. We leverage our experience and capabilities to provide mission-driven solutions tuned to our client's mission needs and strategic direction.

Work that Matters. People that Matter More. At BGS, we believe meaningful work starts with great people. We foster a culture built on respect, collaboration, and accountability-where employees are empowered to contribute ideas, grow professionally, and make an impact. We care about our employees' well-being through competitive benefits, clear expectations, and an environment that values both excellence and connection.

If you align with BGS' company values and culture, we would love for you to explore opportunities to join our growing team by checking out the job description below!

Responsibilities:

The Information System Security Officer / RMF Specialist supports client system owners and business stakeholders through the RMF lifecycle, including system authorization package development, security control documentation, evidence validation, continuous monitoring, POA&M tracking, and ongoing ATO maintenance.

• Develop, update, and maintain RMF authorization artifacts including SSPs, BIAs, FIPS 199 categorizations, PTAs/PIAs, CMPs, e-Authentication documentation, boundary memoranda, system architecture diagrams, and network diagrams.
• Assist system owners with control scoping, tailoring, overlay identification, inheritance mapping, and control evidence collection.
• Validate system-level evidence such as screenshots, logs, scan results, configuration records, and policy artifacts for accuracy and applicability.
• Support development of CPs, IRPs, ConMon Plans, CP/IRP test documentation, RMF templates, checklists, and user guides.
• Track POA&M, monitor remediation progress, and advise stakeholders on corrective actions to reduce authorization risk.
• Support FedRAMP package reviews and identify customer responsibilities for cloud systems.
• Maintain RMF content, process guides, SharePoint materials, office-hour content, and training materials.

Requirements:

• Bachelor's degree or equivalent.
• Experience with RMF, A&A, FISMA, NIST 800-53 Rev. 5, SSP development, POA&M tracking, and security documentation.
• Ability to work directly with system owners, technical teams, ISSOs, privacy stakeholders, and compliance teams.
• Strong attention to detail and ability to produce high-quality authorization documentation.
• Familiarity with federal security tools, GRC systems, ticketing systems, artifact repositories, and evidence management.
• Must be a U.S. citizen.
• Successful drug screening.
• Must be eligible to obtain and maintain a security or clearance badge.

Preferred Qualifications:

• Security+, CISSP, CAP/CGRC, CISA, CISM, or equivalent RMF/security certification.

Location/Work Arrangement:

• Schedule is full-time, Monday - Friday 40-hour week, 4/10's, or 9/80's and may require on call or overnight shifts depending on contract needs.
• This position may be fully onsite or hybrid/remote depending on the needs of the specific contract

Benefits:

BGS offers a competitive total compensation package to eligible employees. Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.

Starting compensation for this role typical salary ranges between $136,849 - $160,999 annually is commensurate with experience relative to the position and may vary based on candidate geographical location.

EEO:

BGS is an Equal Opportunity/Affirmative Action employer. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.

Exclusive Agreement Disclaimer:

BGS has standing contracts with federal agencies throughout the United States. We require an affirmative exclusive agreement to represent all candidates to our clients. By submitting this application, you are consenting to allow BGS to represent you as a candidate for the role in which you are applying.

Schedule is full-time, Monday - Friday 40-hour week, 4/10's, or 9/80's and may require on call or overnight shifts depending on contract needs.