RMF Security Officer & Cloud Compliance Lead

Raft; Maryland; On-site; USD 150,000 - 190,000; Full time

Job summary

Raft is seeking an Information Systems Security Officer and Manager to lead security and compliance across our cloud-native products and customer environments. You will apply RMF, maintain SSPs, and coordinate evidence for ATO across multiple systems, including Kubernetes and containerized workloads.

You will partner with engineering and program teams to automate evidence collection, manage POA&Ms, and perform continuous monitoring.

Qualifications

• Minimum four years in ISSO/ISSM or related role.
• Strong RMF & NIST guidance knowledge.
• Experience applying RMF controls in cloud-native environments (Kubernetes, containers).
• Ability to obtain DoD 8140 cert or Security+ within six months.
• Active Secret clearance with ability to obtain Top Secret.

Responsibilities

• Provide ISSO oversight across Raft's product contracts with RMF compliance.
• Develop and maintain RMF artifacts (SSP, ATO packages, POA&Ms).
• Translate architectures into control implementations, policies, and evidence.
• Coordinate with engineers and stakeholders to gather evidence and readiness across environments.
• Automate evidence collection and recurring compliance reporting.
• Conduct continuous monitoring, vulnerability analysis, and configuration reviews.
• Manage POA&Ms from identification to closure and reporting.

Skills

RMF guidance

Kubernetes security

Container security

RMF artifacts

Vulnerability management

Security clearance

Stakeholder communication

Education

Bachelor’s degree in cybersecurity / IA

CISSP / CISM / CISA or equivalent

Tools

eMASS

Job description

Raft is seeking an Information Systems Security Officer and Manager to lead security and compliance across our cloud-native products and customer environments. You will apply RMF, maintain SSPs, and coordinate evidence for ATO across multiple systems, including Kubernetes and containerized workloads.

You will partner with engineering and program teams to automate evidence collection, manage POA&Ms, and perform continuous monitoring.