RMF Cybersecurity Lead — Policy & Compliance

Phase2 Technology; Arlington (VA); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cybersecurity RMF Lead in the Arlington, VA area. The role focuses on designing, implementing, and managing RMF policies and procedures to secure databases and software assets. You will mentor team members and apply extensive RMF expertise with DoD-aligned practices.

The position requires 5+ years in RMF with A&A support, strong knowledge of NIST SP 800-53, and a Secret clearance. DOE/DoD frameworks and agile DevSecOps experience are highly valued.

Qualifications

• 5+ years of experience with RMF and supporting system categorization, control selection, implementation, and continuous monitoring.
• Experience supporting A&A activities including evidence collection, POA&M updates, and security documentation.
• Experience evaluating security controls such as NIST SP 800-53 for lifecycle compliance.
• Experience integrating RMF with Zero Trust principles into system security architecture.
• Security clearance (Secret) required.

Responsibilities

• Design, implement, and manage RMF policies and procedures for security of databases and software.
• Apply advanced consulting skills and mentor team members in RMF activities.
• Provide oversight on risk assessments and RMF-aligned design tradeoffs.
• Lead RMF workflows with DevSecOps and Agile practices where applicable.

Skills

RMF experience

A&A support

NIST SP 800-53 knowledge

Zero Trust integration

Security clearance

Leadership and mentorship

Security engineering analyses

DevSecOps / Agile RMF

Risk assessments & roadmaps

DoD 8140 CWF-Aligned Certifications

Education

Bachelor's degree in MIS/IT/CS/Math/Engineering/Physical Science

CASP+/SSCP/Security+ certification

Job description

Booz Allen Hamilton is seeking a Cybersecurity RMF Lead in the Arlington, VA area. The role focuses on designing, implementing, and managing RMF policies and procedures to secure databases and software assets. You will mentor team members and apply extensive RMF expertise with DoD-aligned practices.

The position requires 5+ years in RMF with A&A support, strong knowledge of NIST SP 800-53, and a Secret clearance. DOE/DoD frameworks and agile DevSecOps experience are highly valued.