> Markdown version of [/jobs/ext/1317197-rmf-analyst-isso-support](https://www.wearedevelopers.com/jobs/ext/1317197-rmf-analyst-isso-support). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # RMF Analyst / ISSO Support - **Company:** BlueWater Federal Solutions - **Location:** Montgomery, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Package Development Process, SC Clearance, Plan of Action and Milestones - **Published:** July 17, 2026 - **Apply:** https://www.dice.com/job-detail/d08fc183-6a58-486e-9b90-0faebf3c25f2 ## About the Role * 5+ years of RMF support experience. * Experience with eMASS, RMF documentation, ACAS, STIGs, POA&M management and Security compliance reporting * Must have an active Secret clearance * Security+ is required, CAP certification is preferred ## Description Bluewater Federal is looking for a RMF Analyst/ISSO Support to support the USAF at Maxwell AFB. The Base Maintenance (BMx) Family of Systems program provides critical lifecycle support for enterprise U.S. Air Force logistics and maintenance systems that enable global mission readiness and sustainment operations., * Prepare and maintain RMF documentation and cybersecurity artifacts. * Support eMASS package development and authorization activities. * Conduct STIG compliance reviews and vulnerability tracking activities. * Manage POA&M development, maintenance, and remediation reporting. * Support continuous monitoring and cybersecurity compliance assessments. * Coordinate cybersecurity evidence collection supporting release activities. * Assist with audits, inspections, and authorization reviews. ## Related Videos - [Beyond the Numbers: Engineering Recruiting Excellence Through Quality, Data, and Team Empowerment](https://www.wearedevelopers.com/videos/1491-beyond-the-numbers-engineering-recruiting-excellence-through-quality-data-and-team-empowerment) - [How AWS Generates Polyglot Libraries Based on a Single TypeScript Codebase](https://www.wearedevelopers.com/videos/1026-how-aws-generates-polyglot-libraries-based-on-a-single-typescript-codebase) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) - [Supercharge Agentic AI Apps: A DevEx-Driven Approach to Cloud-Native Scaffolding](https://www.wearedevelopers.com/videos/1604-supercharge-agentic-ai-apps-a-devex-driven-approach-to-cloud-native-scaffolding) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)