On-Site RMF Analyst (TS/SCI)

Isys Technologies; Colorado Springs (CO); On-site; USD 100,000 - 150,000; Full time

Job summary

I2X Technologies is seeking an on-site RMF Analyst in Colorado Springs, CO to support a DoD customer. The role requires active TS/SCI clearance and hands-on RMF lifecycle management across enterprise systems.

Responsibilities include managing eMASS registrations, baselines, and evidence; driving continuous monitoring and ATO sustainment; developing SSPs, applying STIGs, and coordinating POA&Ms to closure with system owners and engineers.

Qualifications

• Bachelor’s degree in information assurance, cybersecurity, or a related field plus 3–5 years of relevant experience; or a high school diploma or equivalent plus 7–10 years of relevant information assurance or cybersecurity experience.
• At least 2 years of direct experience serving as an ISSO or cybersecurity practitioner supporting DoD systems.
• Direct experience managing RMF lifecycle artifacts and end-to-end eMASS package management across multiple concurrent systems.

Responsibilities

• Lead RMF process across enterprise systems and enclaves, maintaining registrations, baselines, and evidentiary records in eMASS.
• Drive continuous monitoring and ATO sustainment with ISSO-level ownership.
• Develop, validate, and maintain SSPs with STIGs applied.
• Manage POA&Ms from identification to closure with stakeholders.

Skills

RMF process

eMASS

POA&Ms management

System Security Plans

Interpersonal collaboration

Education

Bachelor's degree in information assurance, cybersecurity, or related field

High school diploma or equivalent plus 7–10 years of relevant information assurance or cybersecurity experience

Tools

eMASS

STIG Viewer

ACAS/SCAP

Job description

I2X Technologies is seeking an on-site RMF Analyst in Colorado Springs, CO to support a DoD customer. The role requires active TS/SCI clearance and hands-on RMF lifecycle management across enterprise systems.

Responsibilities include managing eMASS registrations, baselines, and evidence; driving continuous monitoring and ATO sustainment; developing SSPs, applying STIGs, and coordinating POA&Ms to closure with system owners and engineers.