Senior DoD Risk Management Framework SME

Resource Management Concepts • Charleston, SC

8d • Hybrid

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a Senior DoD RMF Common Control Provider (CCP) Specialist to support an essential federal agency mission. The role serves as the primary authoritative liaison for inheritable enterprise security controls, ensuring foundational computing environments, cloud environments, and enterprise enclaves author, validate, and publish common controls inherited by downstream tenant mission systems. It is a high-visibility contractor role combining deep technical framework expertise with strategic stakeholder communication. The position is contingent on contract award and position availability.

The position offers a highly flexible hybrid schedule, with part-time onsite work at RMC’s secure facility in Charleston, South Carolina, and remaining days eligible for telework. The candidate must be able to commute to project sites in Charleston, SC, or the National Capital Region.

Requirements

• Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent.
• TS/SCI DoD clearance and ability to obtain a CI polygraph.
• At least 5 years implementing NIST SP 800-37 Rev. 2 (RMF) and NIST SP 800-53 controls in federal or DoD environments.
• Proficiency documenting and managing risk packages in eMASS.
• Meet DoD 8140/8570 IAM Level II or III certification requirements, such as CISSP, CISM, or CAP/ISC2 CGRC.
• Ability to commute to project sites in Charleston, SC, or the National Capital Region.

Nice To Haves

• Master’s degree in a listed field or equivalent.
• Intelligence Community experience.
• Experience managing security control allocation for AWS GovCloud, Azure Government, or federal multi-tenant data centers.
• Strong advisory skills, including explaining complex risk methodologies to GS-15 and SES stakeholders.
• Familiarity with CSSP alignment and Cloud Landing Zone security.

Responsibilities

• Develop, maintain, and expand the agency’s enterprise-level Common Control Provider authorization packages within eMASS.
• Provide technical guidance to tenant System Owners and Information System Security Officers on safely inheriting physical, operational, and technical controls.
• Audit and define the physical and logical security boundaries between hosting infrastructure and tenant responsibilities.
• Coordinate with independent Security Control Assessors to schedule, facilitate, and clear multi-tiered technical audits of shared platforms.
• Create, execute, and monitor complex Plans of Action and Milestones addressing enterprise-wide vulnerabilities affecting multiple systems.
• Integrate automated monitoring capabilities to advance infrastructure from traditional static authorization windows toward a Continuous Authorization to Operate state.

Benefits

• Career growth and investment in employee training, certification, and education.
• Tuition assistance.
• Certifications.
• Competitive paid vacation package.
• 11 paid federal holidays.
• High-quality, low-deductible healthcare plans.
• Pet insurance.
• Competitive 401K package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior