Cloud RMF Specialist

Responsibilities Our team has an immediate need for a Navy RMF SME to lead the accreditation effort to support the engineering, buildout and testing of a hybrid cloud environment utilizing the Navy Flank Speed Environment. Primary responsibilities include:

Develop, update, and/or review RMF documentation to include Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports
Assess system compliance against NIST, DoD, and DON security requirements to include the NIST 800-53 controls and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)
Produce evidence as necessary to support compliance status of NIST, DoD, and DON security requirements
Work with system administrators, engineers, and ISSM to create or update system policies, procedures, and process guides
Coordinate with other system SMEs to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories
Analyze vulnerability scans of information systems and assist in remediation tasks.
Provide input into the testing project schedule
Progressive IT experience (9 years) including at least five (5) projects in technical areas included in this job description
Demonstrated experience with Navy RMF as an ISSE, ISSM, Validator, SCA, or NAO Action officer
Experience working with cloud-based systems. (Azure Preferred)
Experience in creating technical documentation, standard operating procedures, and how-to guides
Preferred — Navy Qualified Validator (NQV)
Must possess current IAT II or higher security certification in accordance with IAWF DoD 8570.01M
Must have or be able to get within 2 weeks of hire, an appropriate Computing Environment or vendor certification for associated communications equipment being supported in accordance with IAWF DoD 8570.01M
Microsoft Certified: Azure Administrator Associate, or experience in lieu of, with the ability to obtain within first 60 days of employment

Apply for job