Senior DoD Risk Management Framework (RMF) SME

REQUIRES AN ACTIVE/EXISTING TS/SCI WITH CI POLYGRAPH

Location: Charleston, SC or National Capital Region (NCR)
Employment Type: Full-Time | Hybrid

DAn Solutions is seeking a Senior DoD Risk Management Framework (RMF) Subject Matter Expert specializing in Common Control Provider (CCP) development and enterprise security authorization.

This position supports the development, maintenance, and management of enterprise-level security controls inherited by mission systems. The successful candidate will serve as a senior technical advisor, working with system owners, security teams, and government stakeholders to ensure compliance with DoD cybersecurity requirements.

Key Responsibilities

• Develop and maintain enterprise Common Control Provider authorization packages in eMASS.

• Identify, document, and validate inheritable security controls across enterprise environments.

• Work with System Owners and ISSOs to clarify shared security responsibilities.

• Validate physical and logical system security boundaries.

• Coordinate security assessments with Security Control Assessors.

• Develop, maintain, and track Plans of Action and Milestones (POA&Ms).

• Identify and manage enterprise-wide security vulnerabilities.

• Support continuous monitoring and Continuous Authorization to Operate (cATO) initiatives.

• Provide technical guidance and recommendations to senior government stakeholders.

Required Qualifications

• Active TS/SCI clearance with the ability to obtain a CI Polygraph.

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Mathematics, or a related technical field, or equivalent qualifications.

• At least 5 years of direct experience implementing NIST SP 800-37 Rev. 2 and NIST SP 800-53 security controls in federal or DoD environments.

• Demonstrated experience developing and maintaining RMF authorization packages in eMASS.

• Experience with Common Control Provider authorization and enterprise security control inheritance.

• Knowledge of security boundaries, control allocation, and vulnerability management.

• DoD 8140/8570 IAM Level II or III qualification, such as CISSP, CISM, or CGRC.

• Strong communication skills and ability to advise technical and senior leadership stakeholders.

Preferred Qualifications

• Master's degree in a relevant technical discipline.

• Previous Intelligence Community experience.

• Experience with AWS GovCloud, Azure Government, or federal multi-tenant environments.

• Familiarity with Cybersecurity Service Provider (CSSP) requirements and Cloud Landing Zone security.

• Experience communicating complex cybersecurity requirements to senior government leadership.

Work Location

This position offers a flexible hybrid schedule with required part-time on-site support in Charleston, SC or the National Capital Region. Remaining workdays may be eligible for telework.

Salary Range Disclaimer:The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications