RMF & ISSM Support Specialist

🕒 il y a 16 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Sentar Inc.

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 1990

🔒 Cybersecurity

🤖 Intelligence artificielle

🏢 Entreprise

Cybersecurity • Artificial Intelligence • Enterprise

Sentar Inc. est une entreprise de cyber-intelligence qui se spécialise dans la protection de la sécurité nationale et des infrastructures critiques grâce à des technologies innovantes et des solutions expertes. Leurs services couvrent la gestion des risques cyber, l'identification des vulnérabilités, et l'amélioration de la résilience cyber. Sentar combine des analyses avancées avec une expertise en ingénierie pour fournir des mesures de cybersécurité proactives et assurer l'intégrité opérationnelle des actifs de mission critiques.

Description

• Provide key services to a government client as RMF & ISSM Support Specialist • Complete RMF packages (Security Plans, Annual Security Reviews, Authorizations, POA&Ms, etc.) • Conduct continuous monitoring of assigned systems • Provide relevant cyber security expertise to ongoing programmatic lines of effort • Engineer IAM solutions including RBAC, ABAC, MFA, least-privilege, and PAM across cloud and application environments • Embed security into CI/CD pipelines per the DoD DevSecOps Reference Design, automating SAST, DAST, SCA, container image scanning, and STIG compliance validation • Implement data protection strategies including encryption at rest/in transit and cryptographic key management (AWS KMS, Azure Key Vault) • Review and validate authorization boundary diagrams, architecture/data flow diagrams, hardware/software inventories, IP/subnet assignments, and Med-COI Zone taxonomy artifacts • Serve as senior technical security advisor to program leadership, IPTs, and government stakeholders through engineering review boards and architecture working groups

🎯 Exigences

• 68+ years of hands-on cybersecurity engineering experience in DoD or Federal environments, with demonstrated depth across RMF, cloud security, and application security domains • RMF/Compliance: Hands-on eMASS experience; proven ability to develop and manage ATO packages, SSPs, SCAs, and POA&Ms; proficiency with ACAS/Nessus, SCAP, STIG Viewer, HBSS/ESS analysis • Cloud Security: 3+ years securing AWS GovCloud and/or Azure Government environments; experience with cloud-native security tooling (Security Hub, CloudTrail, Azure Sentinel, Defender), secure landing zone design, and network micro-segmentation • IaC & Automation: Proficiency with Terraform, Ansible, CloudFormation, or Helm for automated, policy-compliant infrastructure deployment and security hardening • Application Security: Experience with SAST, DAST, SCA, and API security testing integrated into CI/CD pipelines (GitLab, Jenkins, or equivalent); familiarity with secure SDLC practices per DoD DevSecOps Reference Design • Containers & Microservices: Hands-on Kubernetes/OpenShift security including pod security standards, image scanning, secrets management, and runtime detection tooling • IAM/Zero Trust: Demonstrated implementation of RBAC, ABAC, MFA, PAM, and zero trust access models in cloud and application environments • DDIL/Edge: Familiarity with DDIL architecture security challenges including offline operations, data synchronization, and edge hardening • Frameworks: Strong working knowledge of NIST SP 800-53, NIST SP 800-144, NIST SP 800-115, DISA STIGs/SRGs, DoD DevSecOps Reference Design, and DoD 8570/8140 • Strong written and verbal communication skills; ability to translate complex technical findings for both technical and executive audiences.

🏖️ Avantages

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options • Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options • Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees • Generous 401(k) match • Competitive PTO plan that graduates quickly with years of service • Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty • Mental health awareness programs • Tuition reimbursement • Professional development reimbursement • Recognition and Awards programs