Sr. Information Assurance Security Specialist, RMF

The Senior Information Assurance Security Specialist, RMF (Steps 1 through 3) supports complex on-premises, cloud, and hybrid systems and maintains technically accurate authorization artifacts. The position works with system owners and technical teams to document the system as implemented, identify control gaps, and prepare defensible packages for Government review and independent assessment., Responsible for system-level cybersecurity analysis, authorization documentation, evidence validation, and stakeholder coordination for complex consular systems undergoing RMF Steps 1 through 3.

• Develop boundaries, architecture and data-flow packages, information-type mappings, and categorization justifications.
• Document control baselines, overlays, tailoring, compensating controls, inheritance, and shared responsibilities.
• Develop SSP content, implementation statements, Evidence Index entries, and supporting artifacts in ArchAngel and approved repositories.
• Coordinate PIA, DIRA, ISA, contingency, incident-response, and configuration-management documentation with relevant specialists.
• Evaluate DevSecOps pipeline controls and document SAST, dependency, container, and infrastructure-as-code scan evidence.
• Identify gaps, develop draft POA&Ms, resolve reviewer comments, and support control demonstrations and assessor requests.
• Mentor less experienced staff and provide designated backup support without assuming independent assessment authority.

• U.S. citizenship and a final Secret clearance or higher
• Relevant degree in cybersecurity, computer science, information systems, or a related discipline, subject to the LCAT and permitted substitutions.
• Senior-level Federal ISSO or RMF experience independently developing authorization packages for complex systems.
• Strong knowledge of NIST RMF, control implementation, Federal categorization, architecture analysis, and evidence validation.
• Ability to distinguish inherited, shared, and system-specific controls and document actual implementations.
• Meet applicable LCAT certification requirements and maintain required credentials., * CISSP, CGRC, or CISM or relevant cloud-security credentials.
• DOS ArchAngel, TRT, FedRAMP, and DevSecOps authorization experience.
• Experience mentoring IASS staff and resolving complex control or boundary issues.

Success in this position will be demonstrated by accurate artifacts, defensible control statements, traceable evidence, timely package delivery, and effective resolution of complex technical issues.

We believe in fairness and clarity throughout our hiring process. The anticipated salary range for this position is $110,000.00-$120,000.00 USD. This is a good-faith range based on factors such as your experience, geographic location, and any applicable contractual requirements, and may vary slightly.

Beyond salary, we provide a robust benefits package and encourage ongoing professional development, because your growth and well-being matter to us. We’re excited to support you in building a rewarding career with us!

Connected Logistics respects the need for confidentiality for all applicants.

Connected Logistics has been named a 2026 WTOP Top Workplace in the medium sized business category. Our mission is clear: we deliver mission-focused IT, cybersecurity, logistics, and enterprise modernization support to federal agencies. When we invest in our people and create an environment where they feel valued and empowered, we deliver stronger outcomes for our clients and the missions we support.

Connected Logistics offers an excellent benefits package that includes health, dental, vision, life, and disability insurance, a great 401(k) package, and generous Paid Time Off.