Risk Management Framework (RMF) SME

Leidos; Virginia (IL); Hybrid; USD 131,000 - 237,000; Full time

Benefits offered by this job

Remote work option

Competitive pay

Job summary

Leidos is seeking a Risk Management Framework (RMF) SME with active Secret clearance to support DoD programs from a remote location. You will lead RMF assessment and authorization activities for diverse software systems and collaborate with government and industry teams to ensure timely ATOs.

In this role, you will tailor NIST SP 800-53r5 controls, manage continuous monitoring, and coordinate with CCPs to maintain secure architectures across ABMS and DI processing nodes.

Qualifications

• US citizenship and an active Secret clearance, with ability to obtain TS/SCI clearance.
• Experience managing RMF packages and artifacts from initiation through continuous monitoring.
• Experience leading end-to-end RMF A&A lifecycle for diverse software systems.
• Experience identifying, documenting, and managing common controls across a system portfolio.

Responsibilities

• Provide RMF subject matter expertise throughout the SDLC.
• Lead and manage end-to-end RMF A&A lifecycle for a portfolio of software systems.
• Identify, document, and manage common controls across systems; develop control strategies.
• Coordinate with CCPs and ensure proper inheritance documentation.
• Organize and manage team tasks to complete RMF packages and milestones.
• Collaborate with DAOs, SCARs, ABMS Cyber teams on RMF requirements.
• Tailor NIST SP 800-53r5 controls per system and environment.
• Monitor and plan continuous monitoring and reauthorization tasks.
• Work with ABMS PDTs on RMF requirements for system connections.
• Stay updated on evolving cybersecurity policies and threats.

Skills

RMF subject matter expertise

A&A lifecycle management

NIST SP 800-53r5

Team coordination

Communication skills

Education

Bachelor's degree

Master's degree

Tools

eMASS RMF

+Xacta RMF

Job description

Description

Risk Management Framework (RMF) SME

Location: Remote

Clearance: Secret with ability to obtain TS/SCI

The Decision Advantage Business Area within Defense at Leidos has an openingfor a highly qualifiedSecret cleared Risk Management Framework (RMF) SME. This is an exciting opportunity to bringyourexperienceto supportacross all-domain large-scale weapon systems, Information Technology Systems, and Command and Control Systemsto realizetheDepartment of Defense Joint All-Domain Command and Control (JADC2).In this role you will supportan Integrated Product Team (IPT) fortheAdvanced Battle Management System (ABMS)Digital Infrastructure (DI) Processing Node (PN)to designand implementsolutions that can be delivered at speed, scale, and with the necessary security to deliver operational advantages to the joint warfighter.ABMS is a top modernization priority for the Department of the Air Forceand will be thebackbone of a network-centric approach to battle management in partnership with all the services acrossJADC2.This position will work closely withProgram Managers,other domain engineers, and Government counterpartsacross Government and Industry partners.

Primary Responsibilities

• Provide RMF subject matter expertise and guidance throughout the software development lifecycle (SDLC).

• Lead and manage the end-to-end RMF Assessment and Authorization (A&A) lifecycle for a designated portfolio of diverse software systems and applications, designing inheritance, ensuring concurrent progress and timely attainment/maintenance of ATOs.

• Strategically identify, document, and manage common controls applicable across the system portfolio; develop and implement common control strategies, coordinating with Common Control Providers (CCPs) and ensuring proper inheritance documentation.

• Organize and manage team tasks to complete each RMF package and achieve all milestones

• Work with DAOs, SCARS, and ABMS PMO Cyber team on RMF requirements, applicability to systems and software, RMF design and implementation, and tailoring of controls

• Tailor and select NIST SP 800-53r5 security controls appropriate for each system's categorization and operational environment within the portfolio.

• Manage and plan continuous monitoring and reauthorization tasks for all RMF packages

• Work with other ABMS PDTs on RMF requirements for connection of systems and implementation of software

• Maintain awareness of evolving cybersecurity policies, standards (NIST, DoD, Intelligence Community (IC)), and threats, applying relevant changes to processes across the portfolio.

• Additional responsibilities as needed by the program.

Basic Qualifications

• BS and12 – 15 years of prior relevant experience orMasterswith 10 – 13 years of prior relevant experience.

• US citizenship and an active Secret security clearance, with ability to obtain aTS/SCIclearance.

• Extensive experience in managing eMASS and Xacta RMF packages and associated artifacts from initiation through continuous monitoring.

• Experience leading and managing the end-to-end RMF A&A lifecycle for a designated portfolio of diverse software systems and applications for the timely attainment/maintenance of ATOs.

• Significant experience identifying, documenting, and managing common controls across a system portfolio, including the development and implementation of common control strategies.

• Experience coordinating Common Control Providers (CCPs) and ensuring proper inheritance documentation.

• Experience organizing and managing team tasks for the completion of RMF packages.

• Previous experience working with DAOs, SCARs, and Government Cyber teams in determining RMF requirements and applicability to systems.

• Working across Integrated Product Teams to communicate security configurations and requirements.

• Knowledge and experience with NIST SP 800-53r5 security controls.

• Strong written and verbal communication skills to collaborate with customer representatives, domain experts, and other systems engineers in the development of complex DoD systems.

• Demonstrated ability toparticipatein cross-functional planning, coordination, and task execution situations involving the full spectrum of system integration activities.

• Ability to work well with people from many different disciplines with varying degrees of technical experience.

Preferred Qualifications

• Familiar with operating in an Agile environment.

• Familiar with Jira.

DABAOPP1

At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting

August 26, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $131,300.00 - $237,350.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.

• competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave and Retirement

More details are available at www.leidos.com/careers/pay-benefits .

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Leidos will consider qualified applicants with criminal histories for employment in accordance with relevant Laws. Leidos is an equal opportunity employer/disability/vet.

#Remote

DABAOPP1