Risk Management Framework (RMF) Analyst – Top Secret Clearance | Norfolk, V at Cambridge International Systems Inc

Norfolk, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

05 Apr, 26

Salary

0.0

Posted On

05 Jan, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risk Management Framework, Cybersecurity, Security Controls, Compliance, Documentation, Configuration Management, Vulnerability Scans, System Security Plans, Contingency Plans, Technical Reports, DoD Policies, NIST SP 800-Series, eMASS, DADMS, STIGs, Network Architecture

Industry

technology;Information and Internet

Description

Risk Management Framework (RMF) Analyst – Top Secret Clearance | Norfolk, VA Cambridge International Systems, Inc. Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you’ll work alongside top talent worldwide, tackling some of today’s most complex and critical challenges in defense and security. We are currently seeking a Risk Management Framework (RMF) Analyst to support operations in Norfolk, VA. This is a full-time position requiring an active DoD TS clearance. This position is contingent upon contract award with an expected award date of January 2026. What You’ll Do Design and maintain enterprise and systems security throughout the development lifecycle in alignment with DoD and DoN RMF guidance. Conduct assessments of management, operational, and technical security controls to evaluate system compliance and risk posture Maintain and update RMF and A&A documentation across the OPTEVFOR Cyber OT&E mission, including revisions in eMASS and DADMS. Create, validate, and revise cybersecurity SOPs, system security plans (SSPs), contingency plans, and privacy impact assessments. Review and maintain inventories of authorized software, GFE, ports, protocols, and circuit registrations (GIAP/SNAP). Execute annual RMF reviews and STIG validations on systems, identifying and recommending corrective actions for non-compliance. Support configuration audits, vulnerability scans, POA&Ms, SARs, test plans, and documentation of RMF lifecycle artifacts. Lead semi-annual tabletop exercises and review business impact analysis and disaster recovery plans for compliance. Serve on the Configuration Control Board (CCB), ensuring approved changes are reflected in security documentation. Provide technical reports on system scan results, cybersecurity compliance, and configuration management. Advise stakeholders on risk management, ATO strategy, and secure architecture to meet mission requirements. What You’ll Bring Required Qualifications: Education & Experience: Minimum 5 years of experience designing enterprise/system security throughout the development lifecycle. Minimum 3 years conducting assessments of security controls and authoring RMF documentation. Minimum 3 years of experience supporting RMF certification and accreditation efforts for DoD/DON systems. Familiarity with eMASS, DADMS, GIAP, STIGs, and the DoDI 8510 series. Strong working knowledge of NIST SP 800-series, DoD cybersecurity policies, and A&A lifecycle artifacts. Must have a current and active DoD TS security clearance with the ability to obtain a SCI clearance. Proficient with modern IT tools and infrastructure technologies Preferred (Nice to Have): Experience supporting OT&E environments, including cyber test toolset and infrastructure validation. Knowledge of network architecture, PKI, firewall and encryption methods, and multilevel/cross-domain security solutions. Ability to translate technical requirements into secure designs that meet mission and compliance objectives. Knowledge of PII data security, program protection planning, and enterprise security architecture frameworks. Proficiency in system hardening, vulnerability remediation, and documentation for RMF artifacts. Experience conducting security audits, contingency plan tests, and cloud-based system evaluations. Travel & Passport Some overnight stays possible. Work Environment Compliance with vaccination and medical requirements for TDY/OCONUS roles as per Vaccine Recommendations by AOR | Health.mil. Office setting: Primarily an office-based role in Norfolk, VA Standard desk/computer work with flexibility for walking and movement on site Must be able to work in an office environment, sitting at a desk, looking at a computer for most of the workday. Work is physically comfortable; the employee has discretion about sitting, walking, standing, etc. May be required to travel short distances to offices/conference rooms and buildings on site. Background & Security Employment is contingent upon successful background investigation Drug screening may be required for federal contract compliance Benefits & Perks We believe in investing in our team—both professionally and personally: Medical, dental, vision, life, accident, and critical illness insurance 401(k) immediate vesting and match Paid time off and company holidays Generous tuition & training support Relocation assistance Sign-on and performance-based bonuses Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Join Us If you're driven by mission, technology, and teamwork—we want to hear from you. Cambridge is growing, and this position is just one of many opportunities on our global team. Know someone perfect for the role? Referrals are welcome—both employees and non-employees may qualify for a bonus. Apply today and help shape the future of secure cloud computing for national security. About Cambridge International Systems At Cambridge, innovation grows through diversity. We are proud to be an equal opportunity employer, committed to creating an inclusive and supportive work environment for all. Learn more at www.cbridgeinc.com.

Responsibilities

The RMF Analyst will design and maintain enterprise and systems security throughout the development lifecycle and conduct assessments of security controls to evaluate system compliance. They will also maintain RMF documentation and support various cybersecurity activities.