> Markdown version of [/jobs/ext/1387125-information-system-security-officer-rmf-specialist](https://www.wearedevelopers.com/jobs/ext/1387125-information-system-security-officer-rmf-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer-RMF Specialist

- **Company:** Boston Government Services
- **Location:** Oak Ridge, TN, United States
- **Salary:** $136,849.0 - $160,999.0
- **Contract:** Permanent contract
- **Skills:** Federal Information Processing Standards (FIPS), Issue Tracking Systems, Information Security Management, Network Diagrams, Package Development Process, Microsoft SharePoint, Systems Architecture, Cloud Platform System, Plan of Action and Milestones
- **Published:** July 22, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9047651/information-system-security-officer-rmf-specialist

## About the Role

* Bachelor's degree or equivalent.
 * Experience with RMF, A&A, FISMA, NIST 800-53 Rev. 5, SSP development, POA&M tracking, and security documentation.
 * Ability to work directly with system owners, technical teams, ISSOs, privacy stakeholders, and compliance teams.
 * Strong attention to detail and ability to produce high-quality authorization documentation.
 * Familiarity with federal security tools, GRC systems, ticketing systems, artifact repositories, and evidence management.
 * Must be a U.S. citizen.
 * Successful drug screening.
 * Must be eligible to obtain and maintain a security or clearance badge., * Security+, CISSP, CAP/CGRC, CISA, CISM, or equivalent RMF/security certification.

## Description

The Information System Security Officer / RMF Specialist supports client system owners and business stakeholders through the RMF lifecycle, including system authorization package development, security control documentation, evidence validation, continuous monitoring, POA&M tracking, and ongoing ATO maintenance.

 * Develop, update, and maintain RMF authorization artifacts including SSPs, BIAs, FIPS 199 categorizations, PTAs/PIAs, CMPs, e-Authentication documentation, boundary memoranda, system architecture diagrams, and network diagrams.
 * Assist system owners with control scoping, tailoring, overlay identification, inheritance mapping, and control evidence collection.
 * Validate system-level evidence such as screenshots, logs, scan results, configuration records, and policy artifacts for accuracy and applicability.
 * Support development of CPs, IRPs, ConMon Plans, CP/IRP test documentation, RMF templates, checklists, and user guides.
 * Track POA&Ms, monitor remediation progress, and advise stakeholders on corrective actions to reduce authorization risk.
 * Support FedRAMP package reviews and identify customer responsibilities for cloud systems.
 * Maintain RMF content, process guides, SharePoint materials, office-hour content, and training materials.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [The QUEST for Better Software](https://www.wearedevelopers.com/videos/721-the-quest-for-better-software)
- [How Data is Shaping our Games](https://www.wearedevelopers.com/videos/176-how-data-is-shaping-our-games)
- [From Syntax to Singularity: AI’s Impact on Developer Roles](https://www.wearedevelopers.com/videos/900-from-syntax-to-singularity-ai-s-impact-on-developer-roles)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Exploring Durable Execution with Python](https://www.wearedevelopers.com/videos/1234-exploring-durable-execution-with-python)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)