RMF & ISSM Support Specialist

🕒 vor 11 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mails für Remote-Jobs erhalten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Sentar Inc.

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

Gegründet 1990

🔒 Cybersecurity

🤖 Künstliche Intelligenz

🏢 Unternehmen

Cybersecurity • Artificial Intelligence • Enterprise

Sentar Inc. ist ein Unternehmen für Cyber-Intelligenz, das sich auf den Schutz der nationalen Sicherheit und kritischen Infrastrukturen durch innovative Technologien und fachkundige Lösungen spezialisiert hat. Ihre Dienstleistungen umfassen das Management von Cyber-Risiken, die Identifizierung von Schwachstellen und die Verbesserung der Cyber-Resilienz. Sentar kombiniert fortschrittliche Analysen mit technischer Expertise, um proaktive Cybersicherheitsmaßnahmen bereitzustellen und die operative Integrität kritischer Missionsressourcen zu gewährleisten.

Beschreibung

• Provide key services to a government client as RMF & ISSM Support Specialist • Complete RMF packages (Security Plans, Annual Security Reviews, Authorizations, POA&Ms, etc.) • Conduct continuous monitoring of assigned systems • Provide relevant cyber security expertise to ongoing programmatic lines of effort • Engineer IAM solutions including RBAC, ABAC, MFA, least-privilege, and PAM across cloud and application environments • Embed security into CI/CD pipelines per the DoD DevSecOps Reference Design, automating SAST, DAST, SCA, container image scanning, and STIG compliance validation • Implement data protection strategies including encryption at rest/in transit and cryptographic key management (AWS KMS, Azure Key Vault) • Review and validate authorization boundary diagrams, architecture/data flow diagrams, hardware/software inventories, IP/subnet assignments, and Med-COI Zone taxonomy artifacts • Serve as senior technical security advisor to program leadership, IPTs, and government stakeholders through engineering review boards and architecture working groups

🎯 Anforderungen

• 68+ years of hands-on cybersecurity engineering experience in DoD or Federal environments, with demonstrated depth across RMF, cloud security, and application security domains • RMF/Compliance: Hands-on eMASS experience; proven ability to develop and manage ATO packages, SSPs, SCAs, and POA&Ms; proficiency with ACAS/Nessus, SCAP, STIG Viewer, HBSS/ESS analysis • Cloud Security: 3+ years securing AWS GovCloud and/or Azure Government environments; experience with cloud-native security tooling (Security Hub, CloudTrail, Azure Sentinel, Defender), secure landing zone design, and network micro-segmentation • IaC & Automation: Proficiency with Terraform, Ansible, CloudFormation, or Helm for automated, policy-compliant infrastructure deployment and security hardening • Application Security: Experience with SAST, DAST, SCA, and API security testing integrated into CI/CD pipelines (GitLab, Jenkins, or equivalent); familiarity with secure SDLC practices per DoD DevSecOps Reference Design • Containers & Microservices: Hands-on Kubernetes/OpenShift security including pod security standards, image scanning, secrets management, and runtime detection tooling • IAM/Zero Trust: Demonstrated implementation of RBAC, ABAC, MFA, PAM, and zero trust access models in cloud and application environments • DDIL/Edge: Familiarity with DDIL architecture security challenges including offline operations, data synchronization, and edge hardening • Frameworks: Strong working knowledge of NIST SP 800-53, NIST SP 800-144, NIST SP 800-115, DISA STIGs/SRGs, DoD DevSecOps Reference Design, and DoD 8570/8140 • Strong written and verbal communication skills; ability to translate complex technical findings for both technical and executive audiences.

🏖️ Vorteile

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options • Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options • Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees • Generous 401(k) match • Competitive PTO plan that graduates quickly with years of service • Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty • Mental health awareness programs • Tuition reimbursement • Professional development reimbursement • Recognition and Awards programs