RMF Forward Deployed Engineer

CVP NextLabs is hiring an RMF Forward Deployed Engineer (FDE) to install, configure, and train customers on FiferAUDIT. You will be the domain expert helping agencies automate their RMF workflows with FiferAUDIT., * Deploy and configure FiferAUDIT in customer cloud environments (AWS, Azure, GCP) ensuring FedRAMP compliance boundaries are met

• Map customer system boundaries to NIST 800-53 control families and assist with control inheritance documentation
• Conduct FiferAUDIT training sessions for agency ISSOs, Security Engineers, and System Owners
• Troubleshoot and resolve deployment issues, integration problems, and user questions
• Translate customer RMF workflow challenges into product configuration solutions
• Document customer configurations, deployment architectures, and training materials
• Travel up to 50% to customer sites (primarily in the DC area) for on-site implementation, workshops, and relationship building
• Provide feedback to the product team on customer use cases, usability improvements, and feature requests

As an FDE-RMF you will deploy FiferAUDIT in customer environments (AWS, Azure, GCP), configure control mappings, train agency staff on the platform, and ensure successful adoption. You should be comfortable explaining RMF concepts to ISSOs and Security Engineers., * Have a deep expertise with NIST 800-53 controls and the full RMF lifecycle (from categorization through continuous monitoring)

• Retain 3+ years of hands-on experience with RMF implementations at federal agencies
• Hold experience with FISMA compliance, FedRAMP authorizations, or agency-specific security assessments
• Maintain excellent communication skills. You can explain RMF concepts to both technical and non-technical audiences
• Can simplify complexity, make fast, sound decisions under pressure
• Possess Active Public Trust clearance OR ability to obtain one (required)
• Are humble, collaborative, and eager to help others

Preferred Qualifications

Experience as an ISSO, Security Control Assessor, or Certifying Official at a federal agency

Experience with tools like CSAM/JCAM, Xacta, RSA Archer, or other GRC platforms

Certifications: CISSP, CAP, CISM, or equivalent, Amazon Web Services (AWS), Artificial Intelligence (AI), Cloud Computing, Communication Skills, Computer Security, Consulting, Customer Training, Document Management, FISMA - Federal Information Security Management Act, Federal Government, GCP (Good Clinical Practices), Government, Healthcare, Identify Issues, Maintain Compliance, Microsoft Windows Azure, Problem Solving Skills, Risk Management Framework (RMF), Security Analysis, Staff Training, Team Player, Training/Teaching, U.S. National Institute of Standards and Technology (NIST), Usability Engineering, Use Cases, Willing to Travel