Senior RMF Security Analyst - Federal A&A & ATO Expert

Cybersecurity Jobs; Gaithersburg (MD); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Diligent Solutions is seeking a Senior RMF Security Analyst to support federal information systems through RMF Steps 1–3. In this hands‑on role, you will develop and maintain RMF security documentation to help systems achieve, maintain, and renew Authorities to Operate (ATOs).

This position is based in Gaithersburg, MD on a hybrid schedule, with work focused on producing accurate, complete, and review‑ready authorization package artifacts.

Qualifications

• Experience completing all aspects of the NIST Risk Management Framework for federal information systems.
• Hands-on experience developing and maintaining federal A&A and authorization packages.
• Strong technical-writing skills with ability to produce Section 508-compliant documentation.

Responsibilities

• Collect and update general system information for federal RMF documentation.
• Create and maintain system records in CSAM, including system identification information and technical narratives.
• Prepare and update PTAs and PIAs.
• Perform and update FIPS 199 security categorizations.
• Develop and update documentation for NIST SP 800-53 controls.
• Coordinate with stakeholders to ensure RMF documentation is accurate and ready for review.
• Assist government stakeholders with addressing findings during concurrence and authorization reviews.

Skills

RMF knowledge

Technical writing

CSAM

A&A documentation

FedRAMP knowledge

NIST SP 800-53 Rev.4/5

NIST SP 800-37 Rev. 2

NIST SP 800-171 Rev. 2

NIST SP 800-47 Rev. 1

Privacy documentation

Education

Bachelor’s degree

Tools

CSAM

Job description

Diligent Solutions is seeking a Senior RMF Security Analyst to support federal information systems through RMF Steps 1–3. In this hands‑on role, you will develop and maintain RMF security documentation to help systems achieve, maintain, and renew Authorities to Operate (ATOs).

This position is based in Gaithersburg, MD on a hybrid schedule, with work focused on producing accurate, complete, and review‑ready authorization package artifacts.