Risk Management Framework (RMF) SME

Risk Management Framework (RMF) SME

Location: Remote

Clearance: Secret with ability to obtain TS/SCI

The Decision Advantage Business Area within Defense at Leidos has an opening for a highly qualified Secret cleared Risk Management Framework (RMF) SME. This is an exciting opportunity to bring your experience to support across all-domain large-scale weapon systems, Information Technology Systems, and Command and Control Systems to realize the Department of Defense Joint All-Domain Command and Control (JADC2). In this role you will support an Integrated Product Team (IPT) for the Advanced Battle Management System (ABMS) Digital Infrastructure (DI) Processing Node (PN) to design and implement solutions that can be delivered at speed, scale, and with the necessary security to deliver operational advantages to the joint warfighter. ABMS is a top modernization priority for the Department of the Air Force and will be the backbone of a network-centric approach to battle management in partnership with all the services across JADC2. This position will work closely with Program Managers, other domain engineers, and Government counterparts across Government and Industry partners.  

Primary Responsibilities

• Provide RMF subject matter expertise and guidance throughout the software development lifecycle (SDLC).

• Lead and manage the end-to-end RMF Assessment and Authorization (A&A) lifecycle for a designated portfolio of diverse software systems and applications, designing inheritance, ensuring concurrent progress and timely attainment/maintenance of ATOs. 

• Strategically identify, document, and manage common controls applicable across the system portfolio; develop and implement common control strategies, coordinating with Common Control Providers (CCPs) and ensuring proper inheritance documentation.

• Organize and manage team tasks to complete each RMF package and achieve all milestones

• Work with DAOs, SCARS, and ABMS PMO Cyber team on RMF requirements, applicability to systems and software, RMF design and implementation, and tailoring of controls

• Tailor and select NIST SP 800-53r5 security controls appropriate for each system's categorization and operational environment within the portfolio.

• Manage and plan continuous monitoring and reauthorization tasks for all RMF packages

• Work with other ABMS PDTs on RMF requirements for connection of systems and implementation of software

• Maintain awareness of evolving cybersecurity policies, standards (NIST, DoD, Intelligence Community (IC)), and threats, applying relevant changes to processes across the portfolio.

• Additional responsibilities as needed by the program.

Basic Qualifications

• BS and 12 – 15 years of prior relevant experience or Masters with 10 – 13 years of prior relevant experience. 

• US citizenship and an active Secret security clearance, with ability to obtain a TS/SCI clearance. 

• Extensive experience in managing eMASS and Xacta RMF packages and associated artifacts from initiation through continuous monitoring.

• Experience leading and managing the end-to-end RMF A&A lifecycle for a designated portfolio of diverse software systems and applications for the timely attainment/maintenance of ATOs. 

• Significant experience identifying, documenting, and managing common controls across a system portfolio, including the development and implementation of common control strategies.

• Experience coordinating Common Control Providers (CCPs) and ensuring proper inheritance documentation.

• Experience organizing and managing team tasks for the completion of RMF packages.

• Previous experience working with DAOs, SCARs, and Government Cyber teams in determining RMF requirements and applicability to systems.

• Working across Integrated Product Teams to communicate security configurations and requirements. 

• Knowledge and experience with NIST SP 800-53r5 security controls.

• Strong written and verbal communication skills to collaborate with customer representatives, domain experts, and other systems engineers in the development of complex DoD systems.  

• Demonstrated ability to participate in cross-functional planning, coordination, and task execution situations involving the full spectrum of system integration activities. 

• Ability to work well with people from many different disciplines with varying degrees of technical experience. 

Preferred Qualifications

• Familiar with operating in an Agile environment.

• Familiar with Jira.

DABAOPP1

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.