Risk Management Framework Specialist

SAIC; Kirtland (NM); On-site; USD 120,000 - 160,000; Full time

Job summary

SAIC is seeking an experienced RMF Specialist to support critical DoD missions by ensuring cybersecurity compliance and resilience of complex DoD information systems. You will guide systems through the full RMF lifecycle, collaborate with mission partners, and help shape secure architectures for sensitive assets.

Responsibilities include leading RMF phases, advising on policy requirements, conducting risk assessments, and managing eMASS/ACAS activities.

Qualifications

• Bachelor’s degree in STEM with 9+ years of relevant experience (or 13+ years if no degree).
• Active Top Secret or DOE Q clearance with SCI eligibility.
• 5+ years RMF experience: categorization, control implementation, assessment, and continuous monitoring.
• Experience with A&A tasks, POA&M maintenance, evidence collection, and security documentation.
• Experience applying NIST SP 800-53 Rev. 5 or DoD frameworks.
• Experience integrating Zero Trust into RMF packages.
• One of CASP+, Security+, or SSCP certification.

Responsibilities

• Lead RMF processes: categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Advise on policy requirements and system design.
• Conduct risk assessments and recommend mitigations.
• Interpret and document security controls across networks and systems.
• Manage eMASS packages and support ACAS vulnerability tracking.
• Support monitoring, log review, testing, and authorization documentation.

Skills

RMF knowledge

Risk assessment

Zero Trust

Security policy guidance

A&A coordination

Education

Bachelor's degree in STEM

Tools

eMASS

ACAS

Job description

Job ID 2617697

Location Kirtland AFB, NM, US

Date Posted 2026-10-09

Category Cyber

Subcategory Cybersecurity Spec

Schedule Full-Time

Shift Day Job

Travel No

Minimum Clearance Required Top_Secret

Clearance Level Must Be Able to Obtain TS/SCI

Potential for Remote Work ORA_ON_SITE

Description

SAIC is seeking an experienced Risk Management Framework (RMF) Specialist to support critical national security missions by ensuring the cybersecurity compliance and resilience of complex Department of Defense (DoD) information systems. In this role, you will guide systems through the full RMF lifecycle, collaborate with mission partners, and help shape secure architectures that protect the nation’s most sensitive assets.

Responsibilities

• Lead systems through all phases of the RMF process, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Serve as a cybersecurity advisor, connecting policy requirements with real‑world system design and implementation.
• Conduct risk assessments, review security test results, and recommend mitigation strategies including configuration changes, tool updates, and process improvements.
• Interpret, implement, and document security controls across networks, enclaves, and complex information systems in alignment with NIST SP 800‑53 and DoD guidance.
• Manage eMASS packages, support ACAS vulnerability identification, and track remediation and mitigation activities.
• Support monitoring, detection, analysis, and audit readiness through log review, security testing, and authorization documentation development.

Qualifications

• Bachelor’s degree in a STEM field and 9+ years of relevant experience (or 4 additional years of experience in lieu of a degree).
• Active Top Secret or DOE Q clearance with SCI eligibility (must be SCI‑eligible within the first 3 months).
• 5+ years of experience supporting RMF activities, including categorization, control implementation, assessment, and continuous monitoring.
• Experience supporting Assessment & Authorization (A&A) tasks such as POA&M maintenance, evidence collection, and security documentation.
• Experience applying cybersecurity controls from NIST SP 800‑53 Rev. 5 or DoD‑specific frameworks.
• Experience integrating Zero Trust principles into RMF packages and system architectures.
• At least one of the following certifications CASP+, Security+, or SSCP.

Desired Skills

• Experience conducting security engineering analyses and advising system owners on risk impacts and mitigation strategies.
• Familiarity integrating RMF workflows into DevSecOps or Agile environments, including sprint‑based compliance and automated monitoring processes.
• Experience performing enterprise‑level risk assessments, documenting findings, and advising leadership on security posture and long‑term compliance strategies.