IT Certified Professional - Sr. Level

Performs day-to-day RMF lifecycle documentation, reporting, and hardware/software reconciliation for ATC systems under the direction of the IT Sys Solutions Architect-Sr. Maintains authorization artifacts, asset and software baselines, and compliance evidence to keep systems authorized and continuously monitored., * Prepare and maintain RMF artifacts - SSPs, control implementation statements, POA&Ms, continuous monitoring reports - and keep eMASS records current.

• Perform hardware and software reconciliation: maintain authoritative asset inventories, approved software lists, and configuration baselines; reconcile against scan and discovery results and the authorization boundary.
• Run and analyze STIG/SCAP and vulnerability scan results; document findings, track remediation, and update POA&Ms.
• Support security control assessments and audits by assembling evidence and responding to assessor data calls.
• Contribute to enterprise security architecture documentation (boundary diagrams, data flows, ports/protocols/services) consistent with DCWF 651 tasks.
• Support IAVA/IAVM compliance reporting and periodic FISMA/Army cybersecurity data calls.

KNOWLEDGE, SKILLS, AND TOOLS

• DoD RMF process and documentation; NIST SP 800-53/53A; DISA STIGs.
• eMASS , STIG Viewer, SCAP Compliance Checker, ACAS/Nessus; asset/inventory tooling.
• Clear technical writing for authorization packages.

• SecurityX (formerly CASP+) or equivalent certification - Government confirmed CISSP, SecurityX , and CySA + are acceptable.
• Minimum 5 years of experience supporting RMF lifecycle reporting.
• Experience with software/hardware reconciliation (asset, software, and baseline inventory).