Senior DoD RMF SME: CCP & Authorization Expert

DAn Solutions, Inc.; Washington (District of Columbia); Hybrid; USD 140,000 - 210,000; Full time

Job summary

DAn Solutions is seeking a Senior DoD RMF Subject Matter Expert specializing in Common Control Provider development to support enterprise security authorization. The role involves advising system owners, security teams, and government stakeholders to ensure compliance with DoD cybersecurity requirements.

The candidate will develop, maintain, and manage enterprise security controls inherited by mission systems, working in a hybrid environment with on-site support in Charleston, SC or NCR.

Qualifications

• Active TS/SCI with CI Polygraph eligibility.
• 5+ years implementing NIST RMF controls in DoD/federal environments.
• Experience developing RMF authorization packages in eMASS.

Responsibilities

• Develop and maintain enterprise Common Control Provider authorization packages in eMASS.
• Identify and validate inheritable security controls across enterprise environments.
• Collaborate with System Owners and ISSOs on shared security responsibilities.
• Validate physical and logical system security boundaries.
• Coordinate security assessments with Security Control Assessors.
• Develop and maintain POA&Ms for remediation tracking.
• Identify and manage enterprise-wide vulnerabilities.
• Support continuous monitoring and cATO initiatives.
• Provide guidance to senior government stakeholders.

Skills

Security clearance TS/SCI with CI Poly

RMF experience

NIST SP 800-37/800-53

eMASS proficiency

clear and effective communication

Education

Bachelor's degree in Cybersecurity/Computer/Electrical Engineering, Mathematics, or related field

Tools

eMASS

Job description

DAn Solutions is seeking a Senior DoD RMF Subject Matter Expert specializing in Common Control Provider development to support enterprise security authorization. The role involves advising system owners, security teams, and government stakeholders to ensure compliance with DoD cybersecurity requirements.

The candidate will develop, maintain, and manage enterprise security controls inherited by mission systems, working in a hybrid environment with on-site support in Charleston, SC or NCR.