Job Requirements
Aberdeen, MD
Secret Polygraph Unspecified
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Job Description
Performs day-to-day RMF lifecycle documentation, reporting, and hardware/software reconciliation for ATC systems under the direction of the IT Sys Solutions Architect-Sr. Maintains authorization artifacts, asset and software baselines, and compliance evidence to keep systems authorized and continuously monitored.
QUALIFICATIONS
DUTIES AND RESPONSIBILITIES
KNOWLEDGE, SKILLS, AND TOOLS
Performs day-to-day RMF lifecycle documentation, reporting, and hardware/software reconciliation for ATC systems under the direction of the IT Sys Solutions Architect-Sr. Maintains authorization artifacts, asset and software baselines, and compliance evidence to keep systems authorized and continuously monitored.
QUALIFICATIONS
- SecurityX (formerly CASP+) or equivalent certification - Government confirmed CISSP, SecurityX , and CySA + are acceptable.
- Minimum 5 years of experience supporting RMF lifecycle reporting.
- Experience with software/hardware reconciliation (asset, software, and baseline inventory).
DUTIES AND RESPONSIBILITIES
- Prepare and maintain RMF artifacts - SSPs, control implementation statements, POA&Ms, continuous monitoring reports - and keep eMASS records current.
- Perform hardware and software reconciliation: maintain authoritative asset inventories, approved software lists, and configuration baselines; reconcile against scan and discovery results and the authorization boundary.
- Run and analyze STIG/SCAP and vulnerability scan results; document findings, track remediation, and update POA&Ms.
- Support security control assessments and audits by assembling evidence and responding to assessor data calls.
- Contribute to enterprise security architecture documentation (boundary diagrams, data flows, ports/protocols/services) consistent with DCWF 651 tasks.
- Support IAVA/IAVM compliance reporting and periodic FISMA/Army cybersecurity data calls.
KNOWLEDGE, SKILLS, AND TOOLS
- DoD RMF process and documentation; NIST SP 800-53/53A; DISA STIGs.
- eMASS , STIG Viewer, SCAP Compliance Checker, ACAS/Nessus; asset/inventory tooling.
- Clear technical writing for authorization packages.
group id: 91117203
