- Company Name
- StratasCorp Technologies
- Job Title
- Cloud RMF Specialist
- Job Description
-
**Job Title:** Cloud RMF Specialist
**Role Summary:**
Subject‑matter expert leading Risk Management Framework (RMF) accreditation for a Navy hybrid cloud environment (Flank Speed). Drives development and maintenance of security documentation, assesses compliance with NIST, DoD, and DON requirements, and collaborates with engineers, ISSMs, and other SMEs to secure cloud‑based systems (Azure preferred).
**Expectations:**
- Deliver complete RMF packages (Security Plans, Implementation Plans, POA&Ms, Risk Assessments).
- Ensure system compliance with NIST 800‑53, DISA STIGs/SRGs, and other DoD security standards.
- Produce evidence, coordinate remediation, and support testing schedules.
- Maintain up‑to‑date architecture, boundary, and inventory diagrams.
- Achieve required certifications within stipulated time frames.
**Key Responsibilities:**
1. Create, review, and update RMF documentation (SSP, POA&M, risk reports).
2. Perform compliance assessments against NIST, DoD, and DON controls.
3. Generate evidence packages to substantiate compliance status.
4. Collaborate with system administrators, engineers, and ISSMs to develop policies, procedures, and guides.
5. Work with SMEs to produce authorization boundary and architecture diagrams, and maintain hardware/software inventories.
6. Analyze vulnerability scan results and guide remediation efforts.
7. Contribute to project testing schedules and milestones.
**Required Skills:**
- ≥9 years progressive IT experience, including ≥5 relevant projects.
- Deep knowledge of Navy RMF processes (ISSE, ISSM, Validator, SCA, NAO Action Officer).
- Experience with cloud platforms, preferably Microsoft Azure.
- Strong technical writing ability for security plans, SOPs, and how‑to guides.
- Ability to interpret and apply NIST 800‑53, DISA STIGs/SRGs, and other DoD security guidelines.
- Proficiency in vulnerability analysis and remediation coordination.
**Required Education & Certifications:**
- Current DoD 8570.01‑M IAT II (or higher) clearance.
- Ability to obtain appropriate computing environment/vendor certification within 2 weeks of hire (per DoD 8570.01‑M).
- Microsoft Certified: Azure Administrator Associate (or equivalent experience), obtainable within 60 days.
- Preferred: Navy Qualified Validator (NQV) certification.