Job Requirements
Aberdeen, MD
Secret Polygraph Unspecified
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Job Description
Performs day-to-day RMF lifecycle documentation, reporting, and hardware/software reconciliation for ATC systems under the direction of the IT Sys Solutions Architect-Sr. Maintains authorization artifacts, asset and software baselines, and compliance evidence to keep systems authorized and continuously monitored.
QUALIFICATIONS
DUTIES AND RESPONSIBILITIES
KNOWLEDGE, SKILLS, AND TOOLS
Performs day-to-day RMF lifecycle documentation, reporting, and hardware/software reconciliation for ATC systems under the direction of the IT Sys Solutions Architect-Sr. Maintains authorization artifacts, asset and software baselines, and compliance evidence to keep systems authorized and continuously monitored.
QUALIFICATIONS
- SecurityX (formerly CASP+) or CISSP (current).
- Minimum 5 years of experience supporting RMP lifecycle reporting.
- Experience with software/hardware reconciliation (asset, software, and baseline inventory).
- Experience managing networks across multiple platforms (Windows/Linux/Apple) and security classification environments (Unclassified and Classified, including Secret-level).
- Available to start on-site 23 November 2026.
DUTIES AND RESPONSIBILITIES
- Prepare and maintain RMF artifacts - SSPs, control implementation statements, POA&Ms, continuous monitoring reports - and keep eMASS records current.
- Perform hardware and software reconciliation: maintain authoritative asset inventories, approved software lists, and configuration baselines; reconcile against scan and discovery results and the authorization boundary.
- Run and analyze STIG/SCAP and vulnerability scan results; document findings, track remediation, and update POA&Ms.
- Support security control assessments and audits by assembling evidence and responding to assessor data calls.
- Contribute to enterprise security architecture documentation (boundary diagrams, data flows, ports/protocols/services).
- Support IAVA/IAVM compliance reporting and periodic FISMA/Army cybersecurity data calls.
KNOWLEDGE, SKILLS, AND TOOLS
- DoD RMF process and documentation; NIST SP 800-53/53A; DISA STIGs.
- eMASS, STIG Viewer, SCAP Compliance Checker, ACAS/Nessus; asset/inventory tooling.
- Clear technical writing for authorization packages.
group id: 91117203
