ServiceNow Senior Subject Matter Expert (SME) – RMF/CAM

New River Systems Corporation; Chantilly (VA); Hybrid; USD 150,000 - 245,000; Full time

Job summary

New River Systems Corporation in Chantilly, VA seeks a RMF CAM Functional Subject Matter Expert to serve as the functional authority for the Xacta-replacement effort inside ServiceNow CAM. You will document the current Xacta-based authorization process, define the target operating model, and guide configuration of the RMF lifecycle for the initial DIA enclave.

Lead continuous-monitoring data flows, CMDB/VR/ITSM integration, and provide a retirement-readiness recommendation while supporting

Qualifications

• Deep knowledge of RMF lifecycle: authorization packages, control selection & tailoring, evidence, findings, POA&M management.

Responsibilities

• Document current Xacta-based authorization process, roles, approvals and pain points.
• Define target CAM/RMF operating model and lead fit-gap analysis for out-of-the-box RMF.
• Inventory active ATO packages, controls, evidence and POA&M for migration boundary.
• Configure and validate the RMF lifecycle for the initial enclave in ServiceNow.
• Support functional testing, migration validation, UAT and initial training.
• Own role-based authorization-status and POA&M dashboard requirements for practitioners and leadership.
• Support Walk-phase continuous monitoring, CMDB/VR/ITSM integration validation, and Xacta retirement-readiness recommendation.

Skills

RMF lifecycle expertise

Xacta experience

ServiceNow CAM/RMF familiarity

translate compliance requirements

stakeholder training

Education

High School Diploma or GED

Associates Degree

Bachelor’s Degree

Master’s Degree

PhD

Tools

Xacta

ServiceNow

GRC tooling

Job description

Location: Chantilly, VA (Government/Contractor SCIF) 100% on-site

Clearance: Active Top Secret SCI Required

We are seeking an RMF/CAM Functional Subject Matter Expert to serve as the functional authority for DIA’s Xacta-replacement effort inside ServiceNow’s Continuous Authorization and Monitoring (CAM) application. You will document the current Xacta-based authorization process, define the target operating model, and guide configuration of the out-of-the-box RMF lifecycle – authorization packages, controls, evidence, findings, POA&M, reviews and approvals – for the initial DIA enclave.

Through Walk you will support continuous-monitoring data flows and CMDB/Vulnerability Response/ITSM integration, working toward a Government-reviewed Xacta retirement-readiness recommendation.

What We’re Looking For

• Deep functional knowledge of the RMF lifecycle: authorization packages, control selection/tailoring, evidence, assessment findings, POA&M management.
• Experience with Xacta or comparable GRC/authorization tooling and migrating authorization records into a new system of record.
• Familiarity with ServiceNow CAM/RMF or IRM GRC applications.
• Ability to translate compliance and authorization requirements into configuration and workflow.
• Experience supporting cutover, user acceptance testing and stakeholder training for a regulated system of record.

Key Responsibilities

• Document current Xacta-based authorization process, roles, approvals and pain points.
• Define target CAM/RMF operating model and lead out-of-the-box fit-gap analysis.
• Inventory active ATO packages, controls, evidence and POA&M for the approved migration boundary.
• Configure and validate the out-of-the-box RMF lifecycle for the initial enclave.
• Support functional testing, migration validation, user acceptance testing and initial training.
• Own role-based authorization-status and POA&M dashboard requirements for practitioners and leadership.
• Support Walk-phase continuous monitoring, CMDB/VR/ITSM integration validation, and the Xacta retirement-readiness recommendation.

Minimum Experience

To be successful in this role, you’ll need:

Success in this role is measured by your ability to translate DIA’s authorization and compliance requirements into a working RMF lifecycle in ServiceNow, and to keep active ATO packages and POA&Ms accurate as the operational record from IOC forward.

Must meet degree and years of experience criteria below:

• High School Diploma/ GED 12
• Associates Degree 10
• Bachelors Degree 8
• Masters Degree 6
• PhD 4

Required Certifications

• DoD 8570 IAT II (e.g., Security+)
• ServiceNow Certified System Administrator (CSA)

Desired Certifications

• CAP (Certified Authorization Professional)
• CISSP
• ServiceNow Certified Implementation Specialist – GRC

Salary Range: $150-245k. The final offered salary will be based on several factors, including but not limited to the candidate’s depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position

New River Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, nation origin, disability, protected veteran status or any other factor protected by law.