Risk Management Framework Engineer

Leidos is seeking an experienced   Risk Management Framework (RMF) Engineer   to support the   Defense Manpower Data Center (DMDC)   CyberPRIMES   program. Leidos is a major partner on the contract and will provide a substantial   portion   of the cybersecurity workforce supporting the   Defense Human Resources Activity (DHRA)   and DMDC. T he RMF Engineer will support the development, maintenance, assessment, and authorization of cybersecurity packages for DHRA information systems. This position will work directly with system owners, cybersecurity personnel, and Government stakeholders to ensure authorization packages are complete, technically   accurate , current, and positioned to move efficiently through the Department of Defense authorization process.   Hybrid Work Locations:  Mark Center, Alexandria, Virginia Department of Defense Center – Monterey Bay, Seaside, California Clearance: Active Secret security clearance required at time of consideration. U.S. Citizen required. Mission Environment   DMDC operates a large and complex Department of Defense information environment supporting personnel,   manpower , identity, readiness, entitlement, and other mission-critical data and applications.   CyberPRIMES   supports the cybersecurity governance and authorization activities   required   to   operate   these systems securely. RMF Engineers will work across multiple authorization boundaries and coordinate with system owners,   Information System Security Managers (ISSMs) ,   Information System Security Officers (ISSOs) , technical teams, assessors, and Government authorizing stakeholders. The   objective   is not simply to   maintain   compliance documentation. The RMF Engineer must understand the underlying system, evaluate how security controls are implemented,   identify   gaps that create authorization or mission risk, and help system owners move those issues to resolution.

Develop, review, and   maintain   complete and   accurate   Risk Management Framework authorization packages.   Review and support development of   System Security Plans (SSPs) , system categorization, security-control selection, control implementation documentation, assessment results, authorization packages, and continuous-monitoring reports.   Maintain RMF authorization schedules, trackers, repositories, workflows, accounts, tickets, and status information.   Maintain and update authorization packages within the   Enterprise Mission Assurance Support Service ( eMASS ) .   Coordinate with system owners, cybersecurity personnel, technical teams, and Government stakeholders to obtain required authorization artifacts and supporting evidence.   Identify   missing artifacts, incomplete documentation, control-implementation gaps, and other issues that may delay authorization.   Provide RMF and   eMASS   guidance to system owners and other program stakeholders.   Support Information System Security Manager and Information System Security Officer functions associated with system authorization and continuous monitoring.   Review security-control implementation and supporting evidence for completeness, technical accuracy, and compliance with applicable requirements.   Support cybersecurity compliance reviews and authorization-status reporting.   Develop, review, and track   Plan of Action and Milestones (POA&M)   items through remediation and closure.   Track conditions associated with an   Authorization to Operate (ATO)   and coordinate required corrective actions.   Perform quality assurance reviews of RMF submissions before Government review or assessment.   Support security-assessment planning, execution, documentation, and reporting.   Support continuous authorization and continuous-monitoring activities for authorized systems.   Assess the impact of changes in Department of Defense cybersecurity policy or authorization requirements and   assist   system owners in