Remote A&A Package Specialist - RMF & NIST Expert

K2United, LLC.; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401(k) matching

Low-cost medical coverage

Paid time off

Jury duty/military/voting leave

Wellness stipend

Tuition assistance

Casual work environment

Technical training and cert support

CareerSafe courses for family

Job summary

K2United is seeking a Mid-Level A&A Package Specialist to support a federal health-sector client. You will develop and maintain RMF artifacts and ensure evidence supports NIST SP 800-53 Rev. 5 compliance, while remainng independent from SCA and SAR validation.

Remote-first role with periodic on-site work in the Washington, DC metro area. You will build SSPs, BIAs, ABNDs, ISAs/MOUs and guide owners through RMF lifecycle with attention to detail and clarity.

Qualifications

• Bachelor's degree in a related field, or equivalent experience.
• Five or more years of RMF and A&A package development experience.
• Hands-on experience authoring SSPs, BIAs, FIPS 199 categorizations, PTA/PIA documentation, and Configuration Management Plans.
• Strong working knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, NIST SP 800-18, and FIPS 199.
• Demonstrated experience supporting systems through the ATO process through final AO decision.

Responsibilities

• Develop and maintain RMF authorization artifacts, including SSP, BIA, FIPS 199 categorization, PTA/PIA, CMP, and e-Authentication documentation.
• Create foundational system documentation, including Boundary Scope Memorandums, system diagrams, and ABND.
• Support control scoping, tailoring, and overlays such as AI Overlay.
• Map system inheritance from Common Control Providers and assist with ISAs/MOUs.
• Technically validate evidence for accuracy and compliance before SSP inclusion.
• Guide system owners through RMF lifecycle for new and reauthorization efforts.
• Support system categorization, impact analysis, and security control selection.
• Apply the NIST AI RMF 1.0 and OMB guidance for AI/ML systems.
• Develop CPs and IRPs and track annual testing.
• Assemble packages for SCA/AO submission and track through decision.
• Support corrective actions and POA&Ms identified during development.

Skills

RMF

A&A package development

NIST SP 800-37

NIST SP 800-53 Rev. 5

FIPS 199

Boundary and network diagrams

ISAs/MOUs

Education

Bachelor's degree

Tools

eMASS

CSAM

Xacta

JCAM

Job description

K2United is seeking a Mid-Level A&A Package Specialist to support a federal health-sector client. You will develop and maintain RMF artifacts and ensure evidence supports NIST SP 800-53 Rev. 5 compliance, while remainng independent from SCA and SAR validation.

Remote-first role with periodic on-site work in the Washington, DC metro area. You will build SSPs, BIAs, ABNDs, ISAs/MOUs and guide owners through RMF lifecycle with attention to detail and clarity.