ServiceNow GRC Architect – RMF/CAM for DoD (TS/SCI) On-Site

New River Systems Corporation; Chantilly (VA); Hybrid; USD 185,000 - 275,000; Full time

Job summary

New River Systems Corporation in Chantilly, VA, seeks a GRC Solution Architect to lead the design of a continuous-authorization posture for DIA’s CAM/RMF implementation, replacing Xacta-based processes. This is a complex ServiceNow GRC program with a focus on target architecture, integration design, and migration boundaries.

You will define CAM/RMF operating model, perform fit-gap analysis, and design CMDB, Vulnerability Response, ITSM, and monitoring integrations, guiding the team through Crawl

Qualifications

• Deep hands-on experience architecting ServiceNow GRC (CAM/RMF) or comparable Risk Management Framework implementations.
• Working knowledge of NIST SP 800-37 and 800-137, ICD 503 and DoD RMF.
• Experience leading fit-gap analysis and target-state architecture for complex, regulated authorization workflows.
• Ability to design integration architecture spanning CMDB, Vulnerability Response and ITSM.

Responsibilities

• Own the target CAM/RMF solution architecture and integration design for the initial authorization enclave.
• Lead out-of-the-box fit-gap analysis against DIA’s current Xacta-based authorization process.
• Define the initial enclave and authorization boundary in partnership with DIA CIO4 stakeholders.
• Design the CMDB, Vulnerability Response, ITSM and monitoring integration set.
• Establish the migration boundary, security, testing and cutover strategy for the Government-approved set of active ATO packages and open POA&Ms.
• Partner with the RMF/CAM Functional SME and development team through Crawl and Walk to ensure delivered configuration matches the approved architecture.
• Support Government acceptance milestones, including IOC go-live and the Xacta retirement-readiness recommendation.

Skills

ServiceNow GRC

CAM RMF

Integration design

Xacta replacement

Government-approved documentation

Education

High School Diploma/ GED

Associates Degree

Bachelors Degree

Masters Degree

PhD

Tools

ServiceNow

CMDB

Vulnerability Response

ITSM

Job description

New River Systems Corporation in Chantilly, VA, seeks a GRC Solution Architect to lead the design of a continuous-authorization posture for DIA’s CAM/RMF implementation, replacing Xacta-based processes. This is a complex ServiceNow GRC program with a focus on target architecture, integration design, and migration boundaries.

You will define CAM/RMF operating model, perform fit-gap analysis, and design CMDB, Vulnerability Response, ITSM, and monitoring integrations, guiding the team through Crawl