Position Type: Full-TimeExperience: 3+ Years
Clearance: SecretAERMOR is seeking subject matter expertise in obtaining Risk Management Framework authorizations, reauthorizations, maintaining POA&M, conducting continuous monitoring including updating system and eMASS records. Competence using eMASS and developing RMF documentation. Knowledge and experience must include system administration of Red Hat workstations and Windows 11 Pro, including patching and updating. Experience must include applying STIGs and conducting vulnerability scanning and analysis. Knowledge of vendor operating system updates and support timelines and processes is essential. An intermediate level knowledge of computer networking, TCP/IP and common network devices is highly desired.
This is not a remote position, up to 25% travel. Responsibilities Include: - Maintain currency on all published RMF documentation, procedures and processes including Standard Operating Procedures, SCA / NAO / DISA memorandums, publications, guidance and orders.
- Utilize appropriate Standard Operating Procedures to verify package accuracy and readiness for each phase of authorization, correct deficiencies and report results.
- Maintain and update all Risk Management Framework (RMF) artifacts. Conduct security reviews of systems annually within required time constraints including scheduling of required security testing.
- Conduct comprehensive RMF package reviews to ensure continued security control compliance based on current guidance and make recommendations for updates.
- Ensure traceability is maintained throughout the RMF artifacts such as diagram, asset lists, vulnerability scans and POA&M.
- Update the RMF Project Lead on status of assigned eMASS packages with respect to timelines, updated RMF guidance, end of life / end of support software, DADMS approval expirations, updated STIGs etc. impacting the systems.
- Draft Memorandums for Record (MFR) in support of configuration changes and manage the overall change process with respect to timelines, documentation and implementation.
- Plan, coordinate and conduct ACAS security scans on systems at customer sites, verify collected data meets all requirements.
Required Skills and Experience: - CompTIA Security+.
- 1 - 3 years' experience creating artifacts and assembling RMF packages in eMASS.
- Risk Management Framework (RMF) training ideally DISA or USFF Provided
- Assured Compliance Assessment Solution (ACAS) Official Training
Compensation: Compensation for this position is based on several considerations, including applicable contract wage rates and labor categories, geographic location, relevant professional experience, technical expertise, education, certifications, and overall alignment with the role's requirements.
AERMOR is committed to providing competitive pay along with a benefits package designed to support employees throughout their careers. Eligible employees may receive medical, dental, and vision insurance, a 401(k) plan, paid time off, and professional development opportunities.
Salary Range: $65,000-$80,000/yr
