RMF Technical Analyst

Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.

Summary:

The Nisga'a Group is looking for a Risk Management Framework (RMF) Analyst.

This is a Part Time position.

Essential Job Functions:

• Represent and serve as System-Level Information System Security Officer (S-ISSO)
• Develop, document, and maintain the system authorization processes within the DHRA instance of eMASS, including, but not limited to: System Security Plan, Implementation Plan, control compliance (self-assessment test results, evidence, STIGs, vulnerability scans, and compliance scans), Plans of Action and Milestones (POA&M) and completion of all requisite DMDC Forms
• Provide Program/Product Owner support for assessments, validations and audits with respect to eMASS access and clarifications.
• Support requirements to maintain current and achieve new Authorities to Operate (ATOs), Authorities to Connect (ATCs) for all IT systems using the DoD Risk Management Framework (RMF).
• Create and maintain entries within established eMASS instances for systems/applications with required artifacts and evidence of compliance associated to the relevant Common Control Identifier (CCI) security controls.
• Remediate any identified findings.
• Provide supporting evidence to substantiate compliance and/or completing annual system reviews.
• Utilize DHRA/DMDC templates, formats, forms.
• Support development of a System Security Plan, which will include:
  • Threats, risks and vulnerabilities that impact the protection of the system's people, information and assets.
  • The system's tolerance to security risks

• Implement corresponding set of security controls in accordance with NIST SP 800-53 and use assessment procedures from NIST SP 800-53A with additional DoD-specific assignment values, overlays, implementation guidance, and assessment procedures as required.
• Ensure system meets the requirements of Subchapter II of Chapter 35 of Title 44, United States Code, "Federal Information Security Modernization Act of 2014" (FISMA) and Section 11331 of Title 40, United States Code.
• Support the RMF Certification and Accreditation process and coordinate directly with all necessary stakeholders.
• Responsible for maintaining the authority to operate and conduct RMF activities pertaining to all life cycle phases (Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor) to maintain compliance with RMF.
• Develop, edit and provide applicable deliverables to all applicable stakeholders.
• Maintain change and configuration records and documentation by tracking all applicable system requests (including Requests for Change) and system requests for information from initial request to closure.
• Provide documentation support to include development of technical software documentation and development of non-technical project documentation deliverables.

Necessary Skills and Knowledge:

• Excellent problem-solving skills.
• Excellent written and verbal communication skills
• Solid organizational skills including attention to detail and multi-tasking skills.
• Strong working knowledge of Microsoft Office

• Knowledgeable in change management for both public and private Web applications to include:
  • Windows Server
  • Internet Information Servies (IIS)
  • AJAX
  • JQUERY
  • C#
  • NET
  • .NET
  • net CORE
• Extensive experience using the Enterprise Mission Assurance Support Service (eMASS)

Minimum Qualifications:

• Bachelor's degree in business or related field or equivalent years of experience.
• Minimum of fifteen (15) years of relevant work experience.
• Extensive experience supporting RMF authorization activities that are consistent with the principles established in the National Institute of Standards and Technology (NIST).
• Experience with government contracting within the US DOD and intelligence communities.
• Experience in DOD acquisitions
• Security+ Certification
• Tier III equivalent or higher BI according to the Defense Counterintelligence and Security Agency (DCSA) and the Office of Personnel Management (OPM) investigative alignment.

Preferred Qualifications:

• At least 10 (ten) years of experience managing complex federal government contracts.
• CISSP
• Project Management Institute - Program Management Professional (PMP) certification
• Active Top Secret Security Clearance

The salary range for this position is $40.00 - $50.00 per hour.