Remote RMF A&A Expert for DoD Cybersecurity

Electrosoft; United States; Remote; USD 115,000 - 125,000; Full time

Job summary

Electrosoft is seeking a Cybersecurity A&A SME to support RMF activities across DoD environments, including IT, OT, PIT, and cloud services. The role emphasizes implementing and assessing security controls, generating documentation, and guiding authorization decisions.

The candidate will work with ISSMs, SCAs, AOs, and government stakeholders, applying NIST SP 800‑53 and DoDI 8510.01 while ensuring compliance and risk mitigation in a complex enterprise setting.

Qualifications

• Bachelor's degree in a technical field; 4 years of related experience may substitute.
• 5+ years of experience in A&A, C&A, or RMF in DoD or Federal environments.
• Experience applying RMF per DoDI 8510.01 and NIST SP 800‑53.
• Must meet DoD 8140 workforce qualifications including IAM Level III.
• SECRECT clearance or higher and IT‑II Non‑Critical Sensitive or Tier 3 eligibility.
• Experience assessing controls across large, complex DoD environments.

Responsibilities

• Support RMF lifecycle phases: categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain RMF artifacts (SSPs, SAPs, SARs, POA&Ms, etc.).
• Assess and validate security controls per DoD/NIST guidance.
• Assist in authorization decisions by evaluating residual risk and recommending compensating controls.
• Utilize eMASS to manage authorization packages and track status.

Skills

RMF implementation

Security assessment

Vulnerability analysis

DoD RMF guidance

Education

Bachelor's degree in Cybersecurity, IT, CS, IS, Eng or related field

Tools

eMASS

ACAS

STIGs

Job description

Electrosoft is seeking a Cybersecurity A&A SME to support RMF activities across DoD environments, including IT, OT, PIT, and cloud services. The role emphasizes implementing and assessing security controls, generating documentation, and guiding authorization decisions.

The candidate will work with ISSMs, SCAs, AOs, and government stakeholders, applying NIST SP 800‑53 and DoDI 8510.01 while ensuring compliance and risk mitigation in a complex enterprise setting.