RMF A&A Cyber Security SME — Remote

Esmcorp; Vienna (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Enterprise Solutions and Management (ESM) is seeking a Cyber Security Assessment & Authorization SME for a remote role. The candidate will lead RMF A&A efforts for DoD and DLA compliance, applying NIST SP 800-53 controls across cloud, OT, and enterprise IT.

Responsibilities include evaluating control deficiencies, developing risk-based recommendations, and briefing senior leadership. The ideal candidate has 5+ years in RMF/NIST C&A, DoD cybersecurity experience, and an active Secret clearance.

Qualifications

• Five (5) years of RMF/NIST C&A experience and DoD cybersecurity experience.
• Experience planning, executing, and maintaining cybersecurity authorizations for complex information systems.
• Ability to assess security controls, identify deficiencies, and develop risk-based recommendations.
• Knowledge of RMF processes and NIST controls across cloud and OT environments.

Responsibilities

• Serve as Cybersecurity SME for RMF A&A of information systems.
• Ensure DoD/DLA policies and RMF guidance are followed.
• Apply NIST SP 800-53 controls to assess and authorize complex environments.
• Evaluate control deficiencies and develop risk-based recommendations.
• Communicate status and outcomes to senior leadership and stakeholders.

Skills

RMF/A&A processes

DoD/NIST SP 800-53

Authorization lifecycle

Risk-based recommendations

Senior leadership briefing

Cloud/OT/enterprise IT

Education

8570/8140 compliant certification

Active Secret clearance

Job description

Enterprise Solutions and Management (ESM) is seeking a Cyber Security Assessment & Authorization SME for a remote role. The candidate will lead RMF A&A efforts for DoD and DLA compliance, applying NIST SP 800-53 controls across cloud, OT, and enterprise IT.

Responsibilities include evaluating control deficiencies, developing risk-based recommendations, and briefing senior leadership. The ideal candidate has 5+ years in RMF/NIST C&A, DoD cybersecurity experience, and an active Secret clearance.