Forward Deployed Engineer - RMF
On-siteDistrict of Columbia, United States
District of Columbia, United StatesOn-siteFull TimeMedium
Full TimeMedium
Job Summary
Deploy FiferAUDIT in customer cloud environments (AWS, Azure, GCP) ensuring FedRAMP compliance boundaries are met and map system boundaries to NIST 800-53 control families. Conduct training sessions for agency ISSOs and Security Engineers, then troubleshoot deployment issues and translate workflow challenges into product configuration solutions. Document architectures and gather feedback on usability improvements. Travel up to 50% to customer sites in the DC area for on-site implementation and workshops. Requires Active Public Trust clearance; 3+ years of hands-on RMF implementation experience at federal agencies.
Required Qualifications
- Have a deep expertise with NIST 800-53 controls and the full RMF lifecycle (from categorization through continuous monitoring)
- Retain 3+ years of hands-on experience with RMF implementations at federal agencies
- Hold experience with FISMA compliance, FedRAMP authorizations, or agency-specific security assessments
- Maintain excellent communication skills. You can explain RMF concepts to both technical and non-technical audiences
- Can simplify complexity, make fast, sound decisions under pressure
- Possess Active Public Trust clearance OR ability to obtain one (required)
Desired Qualifications
- Experience as an ISSO, Security Control Assessor, or Certifying Official at a federal agency
- Experience with tools like CSAM/JCAM, Xacta, RSA Archer, or other GRC platforms
- Certifications: CISSP, CAP, CISM, or equivalent
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.