RMF & ISSM Support Specialist

🕒 August 25

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💝 Customer Support

👻 Ghost score 39%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sentar Inc.

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1990

🎖️ Defense

🏥 Healthcare

💼 Consulting

Defense • Healthcare • Consulting

Sentar Inc. is a cyber intelligence company that specializes in safeguarding national security and critical infrastructure through innovative technology and expert solutions. Their services encompass managing cyber risks, identifying vulnerabilities, and enhancing cyber resilience. Sentar combines advanced analytics with engineering expertise to deliver proactive cybersecurity measures and ensure the operational integrity of critical mission assets.

📋 Description

• Develop and implement secure, zero-trust, defense-in-depth solutions across cloud infrastructure, platforms, and applications • Develop and enforce cloud security baselines and automated policy guardrails using infrastructure-as-code tools • Engineer IAM solutions including RBAC, ABAC, MFA, least privilege, and PAM • Secure Kubernetes/OpenShift containerized workloads, including pod security, network policies, secrets management, and runtime threat detection • Embed security into CI/CD pipelines through SAST, DAST, SCA, container image scanning, and STIG compliance validation • Integrate application security across the SDLC, including secure code review and API security testing • Design and implement cloud-native SIEM and monitoring capabilities for continuous monitoring and RMF compliance • Implement encryption and cryptographic key management strategies • Lead threat modeling and security architecture reviews for JOMIS capabilities • Evaluate and harden DDIL/edge security configurations • Execute end-to-end RMF authorization activities, including SSP development, SCAs, POA&M management, and ATO package maintenance • Apply NIST, DISA STIG/SRG, and DoD/DHA IA requirements to assess, document, and remediate system security posture • Conduct vulnerability analysis using ACAS/Nessus, STIG Viewer, and SCAP; analyze HBSS/ESS output and configurations • Perform root cause analysis on cybersecurity shortfalls • Review and validate authorization boundary diagrams, architecture/data flow diagrams, inventories, IP/subnet assignments, and Med-COI Zone taxonomy artifacts • Serve as senior technical security advisor to program leadership, IPTs, and government stakeholders • Coordinate with ISSMs, system/network administrators, software engineers, and CIOs • Submit Weekly Status Reports and lead or attend stakeholder meetings on RMF and security engineering status

🎯 Requirements

• 6–8+ years of hands-on cybersecurity engineering experience in DoD or Federal environments, with demonstrated depth across RMF • Hands-on eMASS experience • Ability to develop and manage ATO packages, SSPs, SCAs, and POA&Ms • Proficiency with ACAS/Nessus, SCAP, STIG Viewer, and HBSS/ESS analysis • 3+ years securing AWS GovCloud and/or Azure Government environments preferred • Experience with cloud-native security tooling, secure landing zone design, and network micro-segmentation • Proficiency with Terraform, Ansible, CloudFormation, or Helm • Experience with SAST, DAST, SCA, and API security testing integrated into CI/CD pipelines • Familiarity with secure SDLC practices per DoD DevSecOps Reference Design • Hands-on Kubernetes/OpenShift security experience • Demonstrated implementation of RBAC, ABAC, MFA, PAM, and zero trust access models • Familiarity with DDIL architecture security challenges • Strong working knowledge of NIST SP 800-53, NIST SP 800-144, NIST SP 800-115, DISA STIGs/SRGs, DoD DevSecOps Reference Design, and DoD 8570/8140 • Strong written and verbal communication skills • Active Secret Clearance • Bachelor's Degree in Cybersecurity, Computer Science, Systems Engineering, or related STEM field, or at least 10 years of technical equivalent demonstrable experience • IAT Level II certification required, such as CompTIA Security+ CE • CISSP, CASP+, CCSP, AWS Certified Security – Specialty, or Microsoft Certified: Azure Security Engineer Associate strongly desired • CSSLP, GWEB, GPEN, or CEH certifications are a plus

🏖️ Benefits

• Employee ownership model • Voluntary medical, dental, and vision insurance • Flexible Spending Plan options • Voluntary life, critical illness, accident, and long-term care insurance • Group term life insurance • Short-term and long-term disability coverage • Generous 401(k) match • Competitive PTO plan that graduates quickly with years of service • Holiday leave • Bereavement leave • Maternity leave • Jury duty leave • Military duty leave • Tuition reimbursement • Professional development reimbursement • Recognition and Awards programs