Risk Management Framework (RMF) SME

Risk Management Framework (RMF) SME Location: Remote Clearance: Secret with ability to obtain TS/SCI The Decision Advantage Business Area within Defense at Leidos has an opening for a highly qualified  Secret cleared Risk Management Framework (RMF) SME . This is an exciting opportunity to bring your experience to support across all-domain large-scale weapon systems, Information Technology Systems, and Command and Control Systems to realize the Department of Defense Joint All-Domain Command and Control (JADC2). In this role you will support an Integrated Product Team (IPT) for the Advanced Battle Management System (ABMS) Digital Infrastructure (DI) Processing Node (PN) to design and implement solutions that can be delivered at speed, scale, and with the necessary security to deliver operational advantages to the joint warfighter. ABMS is a top modernization priority for the Department of the Air Force and will be the backbone of a network-centric approach to battle management in partnership with all the services across JADC2. This position will work closely with Program Managers, other domain engineers, and Government counterparts across Government and Industry partners.

Provide RMF subject matter expertise and guidance throughout the software development lifecycle (SDLC). Lead and manage the end-to-end RMF Assessment and Authorization (A&A) lifecycle for a designated portfolio of diverse software systems and applications, designing inheritance, ensuring concurrent progress and timely attainment/maintenance of ATOs.  Strategically identify, document, and manage common controls applicable across the system portfolio; develop and implement common control strategies, coordinating with Common Control Providers (CCPs) and ensuring proper inheritance documentation. Organize and manage team tasks to complete each RMF package and achieve all milestones Work with DAOs, SCARS, and ABMS PMO Cyber team on RMF requirements, applicability to systems and software, RMF design and implementation, and tailoring of controls Tailor and select NIST SP 800-53r5 security controls appropriate for each system's categorization and operational environment within the portfolio. Manage and plan continuous monitoring and reauthorization tasks for all RMF packages Work with other ABMS PDTs on RMF requirements for connection of systems and implementation of software Maintain awareness of evolving cybersecurity policies, standards (NIST, DoD, Intelligence Community (IC)), and threats, applying relevant changes to processes across the portfolio. Additional responsibilities as needed by the program.

BS and 12 – 15 years of prior relevant experience or Masters with 10 – 13 years of prior relevant experience.  US citizenship and an active Secret security clearance, with ability to obtain a TS/SCI clearance.  Extensive experience in managing eMASS and Xacta RMF packages and associated artifacts from initiation through continuous monitoring. Experience leading and managing the end-to-end RMF A&A lifecycle for a designated portfolio of diverse software systems and applications for the timely attainment/maintenance of ATOs.  Significant experience identifying, documenting, and managing common controls across a system portfolio, including the development and implementation of common control strategies. Experience coordinating Common Control Providers (CCPs) and ensuring proper inheritance documentation. Experience organizing and managing team tasks for the completion of RMF packages. Previous experience working with DAOs, SCARs, and Government Cyber teams in determining RMF requirements and applicability to systems. Working across Integrated Product Teams to communicate security configurations and requirements.  Knowledge and experience with NIST SP 800-53r5 security controls. Strong written and verbal communication skills to collaborate with customer representatives, domain