Remote DoD A&A & RMF Specialist — Cybersecurity SME

Magnus Management Group LLC; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k)

Dental insurance

Health insurance

Paid time off

Vision insurance

Job summary

Magnus Management Group LLC is seeking an experienced Cybersecurity Assessment & Authorization (A&A) SME to support DoD cybersecurity programs. The role leads RMF activities, supports the ATO lifecycle, and provides guidance on compliance across IT, cloud, OT, applications, and outsourced IT services.

Requires expertise in NIST SP 800-53 and DoD policies. The remote position offers opportunities to influence risk decisions at senior levels while ensuring DoD standards and Federal security

Qualifications

• Minimum five (5) years of A&A, C&A, RMF, and NIST compliance in a DoD environment.
• Experience conducting security control assessments and authorization reviews for large, complex organizations.
• Strong knowledge of NIST SP 800-53, DoDI 8510.01, DoD RMF, continuous monitoring, and cybersecurity governance.
• Excellent analytical, technical writing, communication, and briefing skills.

Responsibilities

• Serve as the cybersecurity SME for Assessment & Authorization (A&A) and RMF activities.
• Lead and support the development, review, and maintenance of RMF authorization packages, including SSPs, SARs, POA&Ms, and ATO documentation.
• Assess security controls in accordance with NIST SP 800-53 and DoD cybersecurity requirements.
• Evaluate vulnerabilities, determine residual risk, and recommend risk mitigation strategies to support authorization decisions.
• Conduct security control assessments and continuous monitoring activities to maintain system authorization.
• Support enterprise cybersecurity compliance for on-premises, cloud, and hybrid environments.
• Advise ISOs, ISSMs, ISSOs, engineers, and Authorizing Officials throughout RMF process.
• Prepare executive-level briefings and communicate cybersecurity risks and remediation recommendations to senior leadership.
• Ensure compliance with DoD cybersecurity policies, DISA STIGs, and applicable federal standards.

Skills

Analytical

Technical writing

Communication

Briefing skills

Education

Bachelor’s degree in Cybersecurity, IT, CS, Engineering, or related field

Job description

Magnus Management Group LLC is seeking an experienced Cybersecurity Assessment & Authorization (A&A) SME to support DoD cybersecurity programs. The role leads RMF activities, supports the ATO lifecycle, and provides guidance on compliance across IT, cloud, OT, applications, and outsourced IT services.

Requires expertise in NIST SP 800-53 and DoD policies. The remote position offers opportunities to influence risk decisions at senior levels while ensuring DoD standards and Federal security