> Markdown version of [/jobs/ext/4262627-sr-information-assurance-security-specialist-rmf](https://www.wearedevelopers.com/jobs/ext/4262627-sr-information-assurance-security-specialist-rmf). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Information Assurance Security Specialist, RMF

- **Company:** Connected Logistics
- **Location:** Springfield, VA, United States
- **Experience:** Expert
- **Salary:** $110,000.0 - $120,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cloud Computing Security, Configuration Management, Cyber Security, Information Systems, Document Management Systems, Data Flow Control, Intrusion Detection and Prevention, Software Vulnerability Management, SC Clearance, Information Technology, Devsecops, Static Application Security Testing
- **Published:** October 3, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=bda8b63313ca6b46

## About the Role

* U.S. citizenship and a final Secret clearance or higher
 * Relevant degree in cybersecurity, computer science, information systems, or a related discipline, subject to the LCAT and permitted substitutions.
 * Senior-level Federal ISSO or RMF experience independently developing authorization packages for complex systems.
 * Strong knowledge of NIST RMF, control implementation, Federal categorization, architecture analysis, and evidence validation.
 * Ability to distinguish inherited, shared, and system-specific controls and document actual implementations.
 * Meet applicable LCAT certification requirements and maintain required credentials., * CISSP, CGRC, or CISM or relevant cloud-security credentials.
 * DOS ArchAngel, TRT, FedRAMP, and DevSecOps authorization experience.
 * Experience mentoring IASS staff and resolving complex control or boundary issues.

Success in this position will be demonstrated by accurate artifacts, defensible control statements, traceable evidence, timely package delivery, and effective resolution of complex technical issues.

## Description

The Senior Information Assurance Security Specialist, RMF (Steps 1 through 3) supports complex on-premises, cloud, and hybrid systems and maintains technically accurate authorization artifacts. The position works with system owners and technical teams to document the system as implemented, identify control gaps, and prepare defensible packages for Government review and independent assessment., Responsible for system-level cybersecurity analysis, authorization documentation, evidence validation, and stakeholder coordination for complex consular systems undergoing RMF Steps 1 through 3.

 * Develop boundaries, architecture and data-flow packages, information-type mappings, and categorization justifications.
 * Document control baselines, overlays, tailoring, compensating controls, inheritance, and shared responsibilities.
 * Develop SSP content, implementation statements, Evidence Index entries, and supporting artifacts in ArchAngel and approved repositories.
 * Coordinate PIA, DIRA, ISA, contingency, incident-response, and configuration-management documentation with relevant specialists.
 * Evaluate DevSecOps pipeline controls and document SAST, dependency, container, and infrastructure-as-code scan evidence.
 * Identify gaps, develop draft POA&Ms, resolve reviewer comments, and support control demonstrations and assessor requests.
 * Mentor less experienced staff and provide designated backup support without assuming independent assessment authority.