RMF Specialist

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a RMF Specialist in San Antonio, TX!

Role Description:

Sentar is currently seeking an RMF Specialist to support a government client. This individual will be responsible for supporting vendor and assigned Information Systems Security Manager (ISSM) Support PMO Authorization RMF Team efforts to complete RMF packages, conduct continuous monitoring of assigned systems, and providing relevant cyber security expertise. You will help take a Defense Health Agency (DHA) Program of Record (POR) through a full accreditation assessment and achieve an Authority to Operate (ATO). Under general direction, uses specialized knowledge or skills to solve complex and unique problems, or direct the daily activities of a business, technical support, or functional support team. Establishes priorities for the completion of assigned tasks. Uses judgment to interpret internal and external issues and develop best practices. May direct resources, prioritize tasks and provide guidance to less experienced team members. Relies upon experience, interpersonal skills, and broad knowledge of field to ensure task completion in compliance with policies, procedures, and business strategy. The Defense Health Agency (DHA) supports the delivery of integrated, affordable, and high quality health services to Military Health System (MHS) beneficiaries and is responsible for driving greater integration of clinical and business processes across the MHS. Our DHA teams make a difference daily by ensuring the security of the health records of active duty and retired military and their families!

Responsibilities:

• Support and coordinate workflow, activity, and documentation necessary to achieve successful RMF Assess and Authorize or Assess Only processes for DHA systems. This includes:
• Coordination among myriad stakeholders, e.g., Security Engineers, Network Administrators, System Administrators, Information Assurance Managers (IAMs) / Information Systems Security Managers (ISSMs), certification authorities (and representatives), accreditation authorities (and representatives), program managers, vendors, etc., necessary to properly identify, document, mitigate, and manage risk attributed to the target system, network, and/or application;
• Identify, develop (either directly, or in coordination with applicable experts), and incorporate common artifacts found in an RMF accreditation package, e.g., system architecture and boundaries, hardware and software inventories, risk assessment reports, POA&Ms, data flows, PPSM accounting, and other necessary system, network, and application documentation;
• Knowledge and experience identifying, assessing, and documenting compliance against applicable DoD Information Assurance (IA) security controls (technical, management, operational), Service regulations, etc., within the RMF package;
• Familiarity with the use of vulnerability scanning and assessment tools (e.g., ACAS/Nessus/STIG Viewer) necessary to identify and document compliance;
• Knowledge of and ability to use applicable compliance and accreditation reporting environments (e.g., eMASS, CMRS) to document the progress of RMF risk assessments.

Qualifications:

Clearance Level: Secret

Education: A technical Bachelors degree or minimum 10 years of technical experience

Certifications: IAT Level II certification required; IAT/IAM III certification is a plus

Experience:

• Demonstrated experience with Risk Management Framework
• Demonstrated efficiency and experience in RMF package development, including POA&Ms (mitigation statements), Security Plans, Risk Assessments, architecture diagrams, hardware/software inventories, and system/site policies, procedures, and processes
• Experience working within DoD (experience under DHA a plus)
• Familiarity and experience with the DoD tool eMASS
• Familiarity with NIST publications
• Experience in assessing systems using NIST 800-53 and/or DISA STIGs and SRGs
• Excellent customer service and organization skills
• Excellent oral and written communication skills

Additional Qualifications a Plus:

• Demonstrated experience with FedRAMP certification and DoD/DISA Cloud Security Requirements.
• Experience working under DHA
• Experience with ACAS and HBSS
• Experience in RMF policy development, process improvement, and strategy implementation
• Knowledge in Continuous Monitoring and Risk Scoring (CMRS)

Benefits at Sentar:

Our unique ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty
• Mental health awareness programs
• Tuition reimbursement
• Professional development reimbursement
• Recognition and Awards programs

If you are not ready to apply for this position, submit your resume here to join our talent community . We'll keep you updated occasionally on new job opportunities.

Sentar is an Affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities

Our culture is one of inclusivity and support. Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster ; EEO Is Law Supplement ; and Pay Transparency .

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at recruiting@sentar.com . Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.