RMF & ISSM Support Specialist

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💝 Customer Support

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sentar Inc.

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1990

🎖️ Defense

🏥 Healthcare

💼 Consulting

Defense • Healthcare • Consulting

Sentar Inc. is a cyber intelligence company that specializes in safeguarding national security and critical infrastructure through innovative technology and expert solutions. Their services encompass managing cyber risks, identifying vulnerabilities, and enhancing cyber resilience. Sentar combines advanced analytics with engineering expertise to deliver proactive cybersecurity measures and ensure the operational integrity of critical mission assets.

📋 Description

• Complete RMF packages, including Security Plans, Annual Security Reviews, Authorizations, and POA&Ms • Conduct continuous monitoring of assigned systems • Provide cybersecurity expertise to ongoing programmatic efforts for DHA medical devices and systems • Navigate and coordinate workflow, activities, and documentation needed to achieve RMF objectives • Architect and implement secure, zero-trust, defense-in-depth solutions across cloud infrastructure, platforms, and applications • Develop and enforce cloud security baselines and automated policy guardrails • Engineer IAM solutions, including RBAC, ABAC, MFA, least privilege, and PAM • Secure Kubernetes/OpenShift containerized workloads, including policies, secrets management, and runtime threat detection • Embed security into CI/CD pipelines through automated SAST, DAST, SCA, container image scanning, and STIG compliance validation • Integrate application security across the SDLC and perform API security testing • Design and implement cloud-native SIEM and monitoring capabilities supporting continuous monitoring and RMF compliance • Implement encryption and cryptographic key management • Lead threat modeling and security architecture reviews for JOMIS capabilities • Evaluate and harden DDIL/edge security configurations • Execute end-to-end RMF authorization activities, including SSP development, SCAs, POA&M management, and ATO package maintenance in eMASS, CMRS, COAMS, and Phoenix • Apply NIST, DISA STIG/SRG, DoD, and DHA IA requirements to assess, document, and remediate security posture • Conduct vulnerability analysis using ACAS/Nessus, STIG Viewer, and SCAP; analyze HBSS/ESS output and configurations • Perform root cause analysis on cybersecurity shortfalls • Review and validate authorization boundaries, architecture/data-flow diagrams, inventories, IP/subnet assignments, and Med-COI Zone taxonomy artifacts • Serve as senior technical security advisor to program leadership, IPTs, and government stakeholders • Coordinate with ISSMs, system/network administrators, software engineers, and CIOs to validate and document control implementation • Submit Weekly Status Reports and lead or attend RMF and security engineering stakeholder meetings

🎯 Requirements

• 6–8+ years of hands-on cybersecurity engineering experience in DoD or Federal environments, with demonstrated depth across RMF • Hands-on eMASS experience • Ability to develop and manage ATO packages, SSPs, SCAs, and POA&Ms • Proficiency with ACAS/Nessus, SCAP, STIG Viewer, and HBSS/ESS analysis • 3+ years securing AWS GovCloud and/or Azure Government environments preferred • Experience with cloud-native security tooling, secure landing zone design, and network micro-segmentation • Proficiency with Terraform, Ansible, CloudFormation, or Helm • Experience integrating SAST, DAST, SCA, and API security testing into CI/CD pipelines • Familiarity with secure SDLC practices per DoD DevSecOps Reference Design • Hands-on Kubernetes/OpenShift security experience • Demonstrated implementation of RBAC, ABAC, MFA, PAM, and zero trust access models • Familiarity with DDIL architecture security challenges, including offline operations, data synchronization, and edge hardening • Strong working knowledge of NIST SP 800-53, NIST SP 800-144, NIST SP 800-115, DISA STIGs/SRGs, DoD DevSecOps Reference Design, and DoD 8570/8140 • Strong written and verbal communication skills; ability to translate complex technical findings for technical and executive audiences • Active Secret Clearance • Bachelor's Degree in Cybersecurity, Computer Science, Systems Engineering, or related STEM field, or at least 10 years of technical equivalent demonstrable experience • IAT Level II certification required, such as CompTIA Security+ CE • CISSP, CASP+, CCSP, AWS Certified Security – Specialty, or Microsoft Certified: Azure Security Engineer Associate strongly desired • CSSLP, GWEB, GPEN, or CEH certifications are a plus

🏖️ Benefits

• Employee ownership model • Voluntary Medical, Dental, Vision, with Flexible Spending Plan options • Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options • Group Term Life, Short-Term and Long-Term Disability provided by Sentar to all qualifying employees • Generous 401(k) match • Competitive PTO plan that graduates quickly with years of service • Holiday schedule • Bereavement leave • Maternity leave • Jury duty leave • Military duty leave • Tuition reimbursement • Professional development reimbursement • Recognition and Awards programs