RMF & Security Control Assessor — IA Administrator (Remote)

Socket.dev; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

3500 Square, LLC is seeking an IA Security Administrator | Security Control Assessor to support a large-scale federal IT environment. This remote role requires DoD RMF experience and the ability to document and assess security controls.

You will work with ISSMs/ISSOs and system owners to remediate findings, develop SAPs/SARs, and manage POA&Ms while maintaining RMF compliance across enterprise systems. A Public Trust is required.

Qualifications

• Knowledge of NIST SP 800-53 controls, DoDI 8510.01 requirements, and eMASS workflows.
• Experience performing cybersecurity compliance assessments in enterprise environments.
• Ability to produce clear, concise security documentation and articulate technical findings to stakeholders.
• Familiarity with the RMF lifecycle and cybersecurity compliance standards.
• Strong problem-solving skills and the ability to work collaboratively across teams.
• Ability to obtain and maintain a Public Trust (Tier 3/NACLC) clearance.

Responsibilities

• Conduct Security Control Assessments (SCAs) per DoD RMF processes and NIST SP 800-53 guidelines.
• Develop, review, and maintain Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and supporting artifacts.
• Analyze and evaluate effectiveness of security control implementations across enterprise IT systems.
• Collaborate with ISSMs, ISSOs, and system owners to identify, document, and remediate assessment findings.
• Support the development and management of Plans of Action and Milestones (POA&Ms) for remediation activities.
• Provide subject matter expertise on security compliance and contribute to continuous improvement of RMF processes.

Skills

RMF familiarity

Documentation writing

Stakeholder communication

Team collaboration

Public Trust clearance

Education

Bachelor's degree in IT / Cybersecurity / CS (ABET/CAE) or CAP/CISSP-ISSAP/GSLC

Job description

3500 Square, LLC is seeking an IA Security Administrator | Security Control Assessor to support a large-scale federal IT environment. This remote role requires DoD RMF experience and the ability to document and assess security controls.

You will work with ISSMs/ISSOs and system owners to remediate findings, develop SAPs/SARs, and manage POA&Ms while maintaining RMF compliance across enterprise systems. A Public Trust is required.