Senior DoD Risk Management Framework (RMF) SME with Security Clearance

Job Description acuCyber is seeking a senior DoD RMF Common Control Provider (CCP) Specialist to directly support an essential federal agency mission. In this role, you will operate as the primary authoritative liaison for inheritable enterprise security controls. You will ensure that foundational computing environments, cloud environments, and enterprise enclaves correctly author, validate, and publish the common controls inherited by downstream tenant mission systems.

This is a high-visibility contractor role requiring an expert split between deep technical framework familiarity and strategic stakeholder communication. The position allows for a highly flexible hybrid work schedule, requiring part-time on-site presence at our secure facilities in either Charleston, SC or the National Capital Region (NCR), with remaining days eligible for telework.

Core Responsibilities: • Enterprise Control Authoring: Develop, maintain, and expand the agency's enterprise-level Common Control Provider (CCP) authorization packages within eMASS. • Inheritance & Downstream Liaison: Provide direct technical guidance to tenant System Owners (SOs) and Information System Security Officers (ISSOs) to map out how they safely inherit physical, operational, and technical controls. • Boundary Validation: Audit and define where the physical and logical security boundaries of the hosting infrastructure end and where the tenant's responsibility begins. • Assessment Coordination: Partner with independent Security Control Assessors (SCAs) to schedule, facilitate, and clear multi-tiered technical audits of shared platforms. • POA&M and Vulnerability Management: Create, execute, and monitor complex Plans of Action and Milestones (POA&M) specifically targeting enterprise-wide vulnerabilities affecting multiple systems. • Continuous Authorization: Drive the integration of automated monitoring capabilities to progress infrastructure from traditional static windows to a Continuous Authorization to Operate (cATO) state.

Required Skills • Bachelor's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent • Top Secret / SCI DoD security clearance with ability to obtain CI Polygraph • Framework Experience: 5+ years of direct experience implementing NIST SP 800-37 Rev. 2 (RMF) and NIST SP 800-53 security controls within a federal or DoD agency infrastructure context. • DoD Compliance Tooling: Proven proficiency navigating and documenting risk packages inside the Enterprise Mission Assurance Support Service (eMASS) registry. • Professional Certifications: Must meet DoD 8140 / 8570 IAM Level II or III baseline requirements (such as CISSP, CISM, CAP/ISC2 CGRC). • Location & Availability: Must reside near or be willing to commute to project sites in either Charleston, SC or the National Capital Region (NCR).

Desired Skills • Master's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent • Prior experience with the Intelligence Community • Prior experience managing control allocation for enterprise architectures like AWS GovCloud, Azure Government, or federal multi-tenant data centers. • Highly polished advisory communication skills; comfortable translating complex risk methodologies to GS-15 and Senior Executive Service (SES) government stakeholders. • Familiarity with Cybersecurity Service Provider (CSSP) alignments and Cloud Landing Zone security paradigms.