RMF Security Automation Architect

Steampunk

Bloomington (IL)

On-site

USD 130,000 - 180,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Steampunk is seeking an RMF Security SME to modernize our security posture by automating control implementation and continuous monitoring across cloud environments. You'll bridge RMF with DevSecOps, map NIST SP 800-53 controls to automated pipelines, and collaborate with engineers, data scientists, designers, and analysts to build auditable, secure systems.

Responsibilities include designing automation pipelines, implementing zero-trust components, and producing SSP/POA&M artifacts as part of

Qualifications

Ability to obtain a U.S. government Security Clearance.
Experience architecting, designing, developing, and implementing cloud solutions.
Experience with one or more cloud platforms (AWS, Azure, or GCP).
5 years of experience applying the RMF, including documenting POA&Ms, SSPs, and A&A support documentation.
Demonstrated understanding of NIST 800-53 security controls and translating requirements into implementations.
At least one active professional certification in cloud/security (e.g., CISSP, AWS/Azure certs) subject to approval.

Responsibilities

Serve as RMF SME interpreting controls and mapping to automated implementations.
Design and implement control automation pipelines using infrastructure as code and OSCAL.
Identify and drive secure cloud control implementations including IAM and data privacy controls.
Collaborate with stakeholders to balance security with usability and translate RMF requirements into technical solutions.
Review IaC for control coverage and risk.
Conduct risk and control assessments to ensure compliance with RMF/NIST.