Senior DoD Risk Management Framework (RMF) SME

DAn Solutions; Washington (District of Columbia); Hybride; USD 140 000 - 210 000; Plein temps

Résumé du poste

DAn Solutions is seeking a Senior DoD RMF Subject Matter Expert specializing in Common Control Provider development to support enterprise security authorization. The role involves advising system owners, security teams, and government stakeholders to ensure compliance with DoD cybersecurity requirements.

The candidate will develop, maintain, and manage enterprise security controls inherited by mission systems, working in a hybrid environment with on-site support in Charleston, SC or NCR.

Qualifications

• Active TS/SCI with CI Polygraph eligibility.
• 5+ years implementing NIST RMF controls in DoD/federal environments.
• Experience developing RMF authorization packages in eMASS.

Responsabilités

• Develop and maintain enterprise Common Control Provider authorization packages in eMASS.
• Identify and validate inheritable security controls across enterprise environments.
• Collaborate with System Owners and ISSOs on shared security responsibilities.
• Validate physical and logical system security boundaries.
• Coordinate security assessments with Security Control Assessors.
• Develop and maintain POA&Ms for remediation tracking.
• Identify and manage enterprise-wide vulnerabilities.
• Support continuous monitoring and cATO initiatives.
• Provide guidance to senior government stakeholders.

Connaissances

Security clearance TS/SCI with CI Poly

RMF experience

NIST SP 800-37/800-53

eMASS proficiency

clear and effective communication

Formation

Bachelor's degree in Cybersecurity/Computer/Electrical Engineering, Mathematics, or related field

Outils

eMASS

Description du poste

REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH

Location: Charleston, SC or National Capital Region (NCR)
Employment Type: Full-Time | Hybrid

DAn Solutions is seeking a Senior DoD Risk Management Framework (RMF) Subject Matter Expert specializing in Common Control Provider (CCP) development and enterprise security authorization.

This position supports the development, maintenance, and management of enterprise-level security controls inherited by mission systems. The successful candidate will serve as a senior technical advisor, working with system owners, security teams, and government stakeholders to ensure compliance with DoD cybersecurity requirements.

Key Responsibilities

• Develop and maintain enterprise Common Control Provider authorization packages in eMASS.

• Identify, document, and validate inheritable security controls across enterprise environments.

• Work with System Owners and ISSOs to clarify shared security responsibilities.

• Validate physical and logical system security boundaries.

• Coordinate security assessments with Security Control Assessors.

• Develop, maintain, and track Plans of Action and Milestones (POA&Ms).

• Identify and manage enterprise-wide security vulnerabilities.

• Support continuous monitoring and Continuous Authorization to Operate (cATO) initiatives.

• Provide technical guidance and recommendations to senior government stakeholders.

Required Qualifications

• Active TS/SCI clearance with the ability to obtain a CI Polygraph.

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Mathematics, or a related technical field, or equivalent qualifications.

• At least 5 years of direct experience implementing NIST SP 800-37 Rev. 2 and NIST SP 800-53 security controls in federal or DoD environments.

• Demonstrated experience developing and maintaining RMF authorization packages in eMASS.

• Experience with Common Control Provider authorization and enterprise security control inheritance.

• Knowledge of security boundaries, control allocation, and vulnerability management.

• DoD 8140/8570 IAM Level II or III qualification, such as CISSP, CISM, or CGRC.

• Strong communication skills and ability to advise technical and senior leadership stakeholders.

Preferred Qualifications

• Master's degree in a relevant technical discipline.

• Previous Intelligence Community experience.

• Experience with AWS GovCloud, Azure Government, or federal multi-tenant environments.

• Familiarity with Cybersecurity Service Provider (CSSP) requirements and Cloud Landing Zone security.

• Experience communicating complex cybersecurity requirements to senior government leadership.

Work Location

This position offers a flexible hybrid schedule with required part-time on-site support in Charleston, SC or the National Capital Region. Remaining workdays may be eligible for telework.

Salary Range Disclaimer:The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications