RMF / CSAM Analyst

PingWind; United States; On-site; USD 75,000 - 104,000; Full time

Benefits offered by this job

Eleven Federal Holidays

Paid Time Off

Parental Leave

Medical plan options

Dental and Vision Insurance

Life and AD&D Insurance

401k with match

Education assistance

Wellness benefits

529 College Savings Plan

Job summary

PingWind is seeking an RMF / CSAM Analyst to ensure the FSA IAM system maintains continuous security authorization and compliance using RMF and CSAM tools. This remote role supports a cloud-based IAM solution adhering to federal identity standards.

Required: Public Trust clearance, 2 years’ experience, and a Bachelor's degree. Responsibilities include FedRAMP alignment, logging and encryption controls, CSAM security controls, and CSF scorecard maintenance for ATO readiness.

Qualifications

• Strong knowledge of RMF and CSAM.
• Experience with FedRAMP, FISMA, POA&M management.
• Familiarity with NIST SP 800-63, OMB M-21-31, and cloud security.
• Ability to analyze scan results and track remediation.
• Excellent documentation and communication skills.

Responsibilities

• Ensure IAM solution complies with FedRAMP, M-21-15? guidance and NIST guidelines.
• Manage event logging to meet standards.
• Oversee encryption of data at rest (AES-256) and in transit.
• Support Security Incident Management and POA&M tracking.
• Maintain CSF scorecard and assist in CSF reporting.
• Support risk management, data handling, and 508 compliance.

Skills

RMF

CSAM

FedRAMP

FISMA

POA&M

NIST 800-63

Data encryption

Logging

CSF scoring

Communication

Documentation

Cloud security

Education

Bachelor's degree

Tools

CSAM tool

MS Office

POAM tracker

Job description

Position Description

The RMF / CSAM Analyst is responsible for ensuring the FSA IAM system maintains continuous security authorization and compliance through the Risk Management Framework (RMF) and the Cyber Security Assessment and Management (CSAM) tool. This role supports the secure operation of the new cloud-based IAM solution while meeting all federal standards for identity services.

Location

Remote

Required Clearance

Public Trust

Required Education

Bachelors Degree

Required Experience

2 years

Position Description

The RMF / CSAM Analyst is responsible for ensuring the FSA IAM system maintains continuous security authorization and compliance through the Risk Management Framework (RMF) and the Cyber Security Assessment and Management (CSAM) tool. This role supports the secure operation of the new cloud-based IAM solution while meeting all federal standards for identity services.

Responsibilities

The RMF / CSAM Analyst ensures the IAM solution complies with FedRAMP requirements, OMB M-24-15 guidance, and NIST SP 800-63 Digital Identity Guidelines. They manage event logging to meet OMB M-21-31 standards and oversee proper encryption of data at rest (AES-256 with SHA-256) and data in transit (latest TLS protocols). The analyst supports Security Incident Management, maintains environment support documentation, and handles key user data encryption and protection requirements. In CSAM, they manage security controls and inheritance statements, track and remediate Plan of Action and Milestones (POA&M) items, support FISMA reporting and corrective action plans, address Continuous Diagnostics and Monitoring (CDM) findings, handle Common Vulnerabilities and Exposures (CVE) responses, and maintain the Cybersecurity Framework (CSF) scorecard at the required level or higher. Additional responsibilities include supporting supply chain risk management, data planning, federal records and Controlled Unclassified Information (CUI) handling, IT accessibility (Section 508), technology business management reporting, and project, risk, and schedule documentation needed to sustain the Authority to Operate (ATO).

Required Qualifications

• Strong knowledge of NIST Risk Management Framework (RMF) and CSAM tool
• Experience with FedRAMP, FISMA, POA&M management, and security control inheritance
• Familiarity with NIST SP 800-63, OMB M-21-31, and cloud security requirements
• Ability to analyze scan results, develop corrective action plans, and track remediation
• Excellent documentation, organization, and attention to detail skills
• Clear communication and collaboration with ISSOs, security teams, and stakeholders
• Understanding of data encryption, logging, and compliance reporting
• Proficiency with Microsoft Office tools and compliance tracking systems
• Ability to work effectively on both routine compliance tasks and urgent security issues
• Commitment to maintaining high cybersecurity standards in a federal environment
• Detail-oriented with excellent documentation and tracking skills
• Good understanding of federal cybersecurity policies and compliance requirements
• Team player capable of supporting both routine compliance and urgent security tasks

About PingWind

PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL.

www.PingWind.com

Our benefits include:

• Eleven Federal Holidays
• Paid Time Off accrued each pay period
• Parental Leave
• Three medical plan choices with generous employer contribution
• Dental and Vision Insurance
• Company paid Short-Term and Long-Term Disability
• Company paid Life and AD&D Insurance
• 401k with competitive matching and vesting schedule
• Continuing education assistance
• Short Term / Long Term Disability & Life Insurance
• Medical, Dependent Care and Commuter Flexible Spending Accounts
• Employee Assistance Program
• Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
• 529 College Savings Plan
• Legal Insurance
• Pet Insurance

Salary Range

$75k-$104K

The pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) job responsibilities, education, certifications, experience, as well as internal equity mapping and alignment with market data, or other applicable laws.

Veterans are encouraged to apply

PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.