Senior RMF ISSE — Risk Management & A&A Specialist

Arcfield; Newport (RI); On-site; USD 87,000 - 152,000; Full time

Job summary

Arcfield is seeking a Mid-Senior RMF ISSE to support NUWCDIVNPT in performing A&A activities to maintain Authorizations to Operate (ATOs) for applications, networks, and devices. The role emphasizes disciplined RMF processes, risk assessment, and policy alignment with DoD/NAVSEA guidance.

The candidate should have extensive RMF experience, the required 8570.01M IAM/IAT Level II certification, and the ability to manage multiple projects while coordinating with stakeholders and securing C&A

Qualifications

• Secret clearance required and maintained.
• 6+ years of cybersecurity experience with RMF.
• Expert RMF experience including policy development and risk assessments.
• RMF package development experience (POA&Ms, Security Plans, Risk Assessments, diagrams, inventories).
• 8570.01M IAM/IAT Level II Certificate (Security+ minimum).
• Strong knowledge of NIST SPs.
• Ability to manage multiple projects.
• Experience with RMF A&A and related processes.
• Experience with ACAS, STIG OSS Manager, STIGViewer, eMASS.
• CMMI Software Development Level 3+ knowledge a plus.
• Knowledge in Continuous Monitoring.
• Excellent customer service and communication skills.
• DISA STIGs and SRGs expert.

Responsibilities

• Provide a disciplined RMF process for risk management and A&A to maintain ATOs.
• Review System Security Plans; execute assessments and develop/track POA&Ms.
• Keep current with Navy RMF policies and DoD/NAVSEA documentation.
• Perform independent security control assessments per NIST SP 800-53/53A and RMF.
• Document requirements in Security Plans, Contingency Plans, BIA, etc.
• Provide guidance and training in eMASS to team members.
• Demonstrate strong organization, multitasking, and reliable collaboration.
• Attend stakeholder meetings and track action items to completion.

Job description

Arcfield is seeking a Mid-Senior RMF ISSE to support NUWCDIVNPT in performing A&A activities to maintain Authorizations to Operate (ATOs) for applications, networks, and devices. The role emphasizes disciplined RMF processes, risk assessment, and policy alignment with DoD/NAVSEA guidance.

The candidate should have extensive RMF experience, the required 8570.01M IAM/IAT Level II certification, and the ability to manage multiple projects while coordinating with stakeholders and securing C&A