Senior DoD Risk Management Framework (RMF) SME

DAn Solutions • Washington, DC

11d • Hybrid

About The Position

DAn Solutions is seeking a Senior DoD Risk Management Framework (RMF) Subject Matter Expert specializing in Common Control Provider (CCP) development and enterprise security authorization. The position supports the development, maintenance, and management of enterprise-level security controls inherited by mission systems. The successful candidate will serve as a senior technical advisor, working with system owners, security teams, and government stakeholders to ensure compliance with DoD cybersecurity requirements.

The position is based in Charleston, SC, or the National Capital Region (NCR), and offers a flexible hybrid schedule with required part-time on-site support. Remaining workdays may be eligible for telework. The role requires an active TS/SCI clearance with CI polygraph.

Requirements

• Active TS/SCI clearance with the ability to obtain a CI Polygraph.
• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Mathematics, or a related technical field, or equivalent qualifications.
• At least 5 years of direct experience implementing NIST SP 800-37 Rev. 2 and NIST SP 800-53 security controls in federal or DoD environments.
• Demonstrated experience developing and maintaining RMF authorization packages in eMASS.
• Experience with Common Control Provider authorization and enterprise security control inheritance.
• Knowledge of security boundaries, control allocation, and vulnerability management.
• DoD 8140/8570 IAM Level II or III qualification, such as CISSP, CISM, or CGRC.
• Strong communication skills and ability to advise technical and senior leadership stakeholders.

Nice To Haves

• Master's degree in a relevant technical discipline.
• Previous Intelligence Community experience.
• Experience with AWS GovCloud, Azure Government, or federal multi-tenant environments.
• Familiarity with Cybersecurity Service Provider (CSSP) requirements and Cloud Landing Zone security.
• Experience communicating complex cybersecurity requirements to senior government leadership.

Responsibilities

• Develop and maintain enterprise Common Control Provider authorization packages in eMASS.
• Identify, document, and validate inheritable security controls across enterprise environments.
• Work with System Owners and ISSOs to clarify shared security responsibilities.
• Validate physical and logical system security boundaries.
• Coordinate security assessments with Security Control Assessors.
• Develop, maintain, and track Plans of Action and Milestones (POA&Ms).
• Identify and manage enterprise-wide security vulnerabilities.
• Support continuous monitoring and Continuous Authorization to Operate (cATO) initiatives.
• Provide technical guidance and recommendations to senior government stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior