Remote DoD RMF A&A SME

Magnus Management Group LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k)

Health insurance

Dental insurance

Vision insurance

Paid time off

Job summary

Magnus Management Group LLC is seeking an experienced Cybersecurity Assessment & Authorization (A&A) SME to support DoD cybersecurity programs. The role leads RMF activities, supports the ATO lifecycle, and provides expert guidance on cybersecurity compliance across IT, cloud, OT, applications, and outsourced IT services.

The position requires expertise in NIST SP 800-53, DoD policies, and enterprise risk management. This is a remote position in the United States.

Qualifications

• Five or more years in A&A, C&A, RMF, and NIST compliance within a DoD setting.
• Experience conducting security control assessments and authorization reviews for large organizations.
• Strong knowledge of NIST SP 800-53, DoD RMF, continuous monitoring, and cybersecurity governance.

Responsibilities

• Serve as the cybersecurity SME for Assessment & Authorization (A&A) and RMF activities.
• Lead RMF authorization package development, review, and maintenance (SSPs, SARs, POA&Ms, ATO documents).
• Assess security controls per NIST SP 800-53 and DoD requirements.
• Evaluate vulnerabilities, determine residual risk, and recommend mitigations for authorization decisions.
• Conduct security control assessments and continuous monitoring to maintain authorization.
• Support enterprise cybersecurity compliance for on-prem, cloud, and hybrid environments.
• Advise ISOs, ISSMs, ISSOs, engineers, and Authorizing Officials during RMF processes.
• Prepare executive briefings and communicate risks, status, and remediation to senior leadership.
• Ensure compliance with DoD policies, DISA STIGs, and federal security standards.

Skills

RMF

NIST SP 800-53

A&A

DoD policies

Security assessments

Executive briefings

Technical writing

Education

Bachelor's degree in Cybersecurity, IT, CS, Engineering

Job description

Magnus Management Group LLC is seeking an experienced Cybersecurity Assessment & Authorization (A&A) SME to support DoD cybersecurity programs. The role leads RMF activities, supports the ATO lifecycle, and provides expert guidance on cybersecurity compliance across IT, cloud, OT, applications, and outsourced IT services.

The position requires expertise in NIST SP 800-53, DoD policies, and enterprise risk management. This is a remote position in the United States.