RMF Engineer

Innovatus Technology Consulting•Suffolk, VA

2d•Onsite

About The Position

Innovatus Technology Consulting is seeking an experienced Risk Management Framework (RMF) Engineer to support system Assessment and Authorization (A&A) activities in accordance with DoD RMF and NIST requirements. The RMF Engineer will be responsible for developing, assessing, reviewing, and maintaining RMF documentation and authorization artifacts throughout the system lifecycle. This role requires close collaboration with system engineers, cybersecurity personnel, and government stakeholders and includes periodic travel to support program needs.

Requirements

Active or current DoD Secret Security Clearance
Experience supporting DoD RMF processes and A&A activities
Hands-on experience developing RMF artifacts (SSPs, CPs, control evidence, test plans)
Familiarity with NIST SP 800-53, RMF steps, and authorization workflows
Experience uploading, managing, and validating artifacts in eMASS
Ability to work collaboratively with engineering, cybersecurity, and government stakeholders
Strong written communication and technical documentation skills

Nice To Haves

Experience supporting DoD research, development, or operational environments
Experience performing security control testing and assessments
Understanding of system engineering and configuration/change management
DoD 8570/8140 certification (e.g., Security+, CAP, CISSP)

Responsibilities

Assist system and cybersecurity teams in identifying information types, system boundaries, and information flows to support accurate system categorization.
Develop, maintain, and update RMF documentation and required authorization artifacts.
Participate in and support technical and stakeholder collaboration meetings as required.
Provide artifact support and justification for the selection and implementation of applicable security controls.
Develop required documentation and diagrams, including: System Security Plans (SSPs), Contingency Plans (CPs), Continuous Monitoring Strategies and supporting diagrams.
Support the assessment and evaluation of implemented security controls, working with engineering teams to identify gaps or deficiencies.
Assist in developing engineering change recommendations to achieve security control compliance when required.
Create security control test plans, conduct assessments, and evaluate test results for compliance.
Assist in identifying remediations and mitigations for assessment findings.
Conduct thorough final reviews of RMF artifacts, images, documentation, and evidence within eMASS prior to submission.
Support final authorization submissions and address approving authority feedback related to system risk, documentation, and testing results.