IT Certified Professional - Sr. Level with Security Clearance

Job Description Performs day-to-day RMF lifecycle documentation, reporting, and hardware/software reconciliation for ATC systems under the direction of the IT Sys Solutions Architect-Sr. Maintains authorization artifacts, asset and software baselines, and compliance evidence to keep systems authorized and continuously monitored. QUALIFICATIONS

• SecurityX (formerly CASP+) or equivalent certification - Government confirmed CISSP, SecurityX , and CySA + are acceptable.
• Minimum 5 years of experience supporting RMF lifecycle reporting.
• Experience with software/hardware reconciliation (asset, software, and baseline inventory). DUTIES AND RESPONSIBILITIES
• Prepare and maintain RMF artifacts - SSPs, contr ol implementation statements, POA&&Ms, continuous monitoring reports - and keep eMASS records current.
• Perform hardware and software reconciliation: maintain authoritative asset inventories, approved software lists, and configuration baselines; reconcile against scan and discovery results and the authorization boundary.
• Run and analyze STIG/SCAP and vulnerability scan results; document findings, track remediation, and update POA&&Ms.
• Support security contr ol assessments and audits by assembling evidence and responding to assessor data calls.
• Contribute to enterprise security architecture documentation (boundary diagrams, data flows, ports/protocols/services) consistent with DCWF 651 tasks.
• Support IAVA/IAVM compliance reporting and periodic FISMA/Army cybersecurity data calls. KNOWLEDGE, SKILLS, AND TOOLS
• DoD RMF process and documentation; NIST SP 800-53/53A; DISA STIGs. * eMASS , STIG Viewer, SCAP Compliance Checker, ACAS/Nessus; asset/inventory tooling.
• Clear technical writing for authorization packages.