Lead DoD RMF Information Assurance Specialist

Federal IT Consulting (FEDITC); Indianapolis (IN); On-site; USD 120,000 - 180,000; Full time

Job summary

FEDITC, LLC is seeking an Information Assurance Analyst, SME to lead RMF accreditation operations for the DFAS Common Computing Environment (CCE). The role requires expert A&A knowledge, DoD RMF, and handling RMF artifacts to maintain continuous Authority to Operate across cloud and on-premises systems.

The candidate will supervise IA staff, manage FISMA compliance, coordinate with DFAS validators and ISSMs, and support audits and continuous monitoring.

Qualifications

• Minimum 10 years of information assurance experience in DoD or Federal environments.
• Expert knowledge of DoD RMF (DoDI 8510.01), NIST SP 800-37, and NIST SP 800-53 security controls.
• Demonstrated experience managing A&A packages in eMASS.
• Experience supporting FISMA compliance programs and federal cybersecurity audits (FISCAM, SSAE).
• Strong knowledge of continuous monitoring, vulnerability management, and POA&M processes.
• Experience with security control assessments and validation methodologies.
• Understanding of DoD IT security policies, DISA STIGs, and compliance frameworks.
• Experience coordinating with Authorizing Officials, ISSMs, and security validators.
• Proven ability to lead compliance teams and manage multiple concurrent authorization packages.
• Ability to support COOP exercises and emergency operations.

Responsibilities

• Lead and supervise Information Assurance staff delivering RMF compliance and accreditation support for the DFAS CCE.
• Manage FISMA compliance including annual control testing, documentation, and reporting.
• Oversee preparation and maintenance of all RMF artifacts including Security Plans, Control Validations, POA&Ms, and Acceptance of Risk documentation.
• Coordinate support for FISCAM audits, DFAS internal audits, and SSAE attestations.
• Ensure ATO/ATC packages remain current and compliant for all CCE mission systems (cloud and on-premises).
• Direct continuous monitoring activities including vulnerability scan review, patch management compliance, and IAVA tracking.
• Lead POA&M management, root cause analysis, and remediation coordination.
• Coordinate with DFAS CIO validator and ISSM on all RMF actions and compliance requirements.
• Develop and maintain IA documentation including policies, procedures, and audit evidence.
• Ensure 100% RMF certification maintenance and 95%+ FISCAM control pass rates.

Skills

RMF expertise

A&A package management

FISMA compliance

Vulnerability management

POA&M processes

COOP / emergency operations

Team leadership

Audit coordination

Education

BA/BS Degree

Tools

Xacta

Archer

eMASS

Job description

FEDITC, LLC is seeking an Information Assurance Analyst, SME to lead RMF accreditation operations for the DFAS Common Computing Environment (CCE). The role requires expert A&A knowledge, DoD RMF, and handling RMF artifacts to maintain continuous Authority to Operate across cloud and on-premises systems.

The candidate will supervise IA staff, manage FISMA compliance, coordinate with DFAS validators and ISSMs, and support audits and continuous monitoring.