RMF Cybersecurity Lead: Design & Elevate Secure Systems

Booz Allen Hamilton; Arlington (VA); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cybersecurity RMF Lead to design, implement, and manage RMF policies and procedures supporting database and software security. You will apply advanced consulting skills, mentor teammates, and help clients achieve continuous monitoring and compliant system operations.

You have 5+ years RMF experience (system categorization, control selection, and A&A), knowledge of NIST SP 800-53, and ability to integrate Zero Trust into security architecture.

Qualifications

• 5+ years of RMF experience including system categorization, control selection, implementation, and continuous monitoring.
• Experience supporting A&A activities such as evidence collection, POA&M updates, and security documentation.
• Experience interpreting security controls like NIST SP 800-53 to ensure compliance throughout the system lifecycle.
• Experience integrating Zero Trust principles into RMF packages and system security architecture.
• Bachelor's degree in MIS/IT/CS/Math/Engineering/Physical Science; certifications such as CASP+/Security+/SSCP is preferred.

Responsibilities

• Design, implement, and manage RMF policies and procedures for database and software security.
• Support assessments and authorization activities and drive continuous monitoring.
• Mentor and may supervise team members on RMF activities.

Skills

RMF experience

A&A support

NIST SP 800-53 knowledge

Zero Trust integration

Security clearance

Education

Bachelor's degree

Job description

Booz Allen Hamilton is seeking a Cybersecurity RMF Lead to design, implement, and manage RMF policies and procedures supporting database and software security. You will apply advanced consulting skills, mentor teammates, and help clients achieve continuous monitoring and compliant system operations.

You have 5+ years RMF experience (system categorization, control selection, and A&A), knowledge of NIST SP 800-53, and ability to integrate Zero Trust into security architecture.