RMF Consultant

Description

Are you ready for your next challenge?

The Defense Group has a dynamic job opening for an RMF (Risk Management Framework) Consultant to work at our customer site at the Navy Maritime Intelligence Center in Suitland, MD. In this role, you will provide Information Assurance support for the Farragut Technical Analysis Center (TAC) at the Office of Naval Intelligence (ONI).

What Will You Do

• Assist in ensuring the full compliance of all TAC Mission Systems with all applicable security accreditation or authorization requirements and best practices as prescribed by Office of the Director of National Intelligence (ODNI), Defense Intelligence Agency (DIA), DoD, Defense Information Systems Agency (DISA), Navy, Naval Intelligence Activity (NIA), and ONI authorities.

• Communicate with TAC leadership and other agencies (both internal and external) regarding matters that could significantly impact any TAC Mission Systems and their accreditation.

• Certify that the identified specialized IT systems in Farragut comply with all appropriate Information Technology security Assessment and Authorization (A&A) requirements and best practices as prescribed by Office of the Director of National Intelligence (ODNI), Defense Intelligence Agency (DIA), DoD, Defense Information Systems Agency (DISA), and local authorities. 

• Assist in preparing all necessary security documentation for all TAC Mission Systems to ensure the successful completion of Collateral or SCI-level security testing & evaluation (ST&E) and accreditation and ensure full Accreditations and issuance of Authority to Operate (ATOs) are established and maintained continuously for all TAC Mission Systems.

• Participate in meetings and technical exchanges with ONI, Fleet and NAVINTEL validators, assessors, and authorizing officials to; remain abreast of current RMF Tools.

• Techniques and procedures; collaborate on current TACT ATO projects and statuses, and; confirm understanding of new STIGS and their intent.

• Conduct and report results of security-related analyses, evaluations, risk assessments, and other activities supporting requirements to update or establish new Mission Systems or Mission Applications requested by TAC Functional Lead(s). Attend Cybersecurity policy implementation meetings and briefings, and develop, provide, and deliver technical, operator, and customer training and briefings as required by the approving authority or as requested by Government Functional Lead(s).

• Prepare, collate, track, and manage all documentation comprising a Risk Management Framework (RMF) project Body of Evidence (BOE) and Security Assessment Package (SAP) through the RMF process in XACTA (SIPRNET/ NIPRNET) and EMASS (JWICS) to establish and maintain continuous ATO; documentation for each system will be managed in accordance with policy of the TAC Configuration Management Team.

Your Areas of Knowledge & Expertise (job qualifications)

• Bachelor’s degree with 8 or more years’ experience in Certification and Accreditation (C&A) with DIACAP, DCID 6/3, ICD 503, and/or NIST Framework; additional years of related work experience may be considered in lieu of degree

• Three (3) or more years’ experience in Project Management

• Experience with DoD, DISA, Navy NETWARCOM, DoDIIS, and IC tools, systems, and reporting mechanisms/requirements for C&A..

• Practical knowledge of IC, DoD, and DoN Cybersecurity initiatives, and secure information/networking technologies.

• Demonstrated experience as an ISSO, ISSE, Package Submission Officer (PSO), Validators, and Security Controls Assessor (SCA)

• Experience shepherding projects through the RMF process in XACTA and EMASS 

Clearance Requirement

• A current DoD Top Secret/SCI level of clearance

Required Certification

• Active IAM Level III DoD Approved 8570 Baseline Certification

Preferred (nice to have)

• (ISC)2 Certified Information Systems Security Professional (CISSP), or EC-Council Certified Ethical Hacker (CEH)

HOPPER

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is a Fortune 500® technology, engineering, and science solutions and services leader working to solve the world’s toughest challenges in the defense, intelligence, civil, and health markets. The company’s 45,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $14.4 billion for the fiscal year ended December 30, 2022.  For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [email protected].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.