RMF, ISSM Support Specialist

Sentar Inc.

RMF & ISSM Support Specialist providing cybersecurity services to the Defense Health Agency. Collaborating with various stakeholders to manage risks and compliance in military health systems.

Posted 7/14/2026full-timeRemote • 🇺🇸 United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Risk Management Framework (RMF) processes, compliance with NIST SP 800-53 and DISA STIGs, and effective stakeholder coordination. Proficient in utilizing compliance reporting environments such as eMASS and providing cybersecurity recommendations based on vulnerability assessments.

Highest-signal resume keywords

Risk Management Framework (RMF) ExperienceNIST SP 800-53 ComplianceEMASS ProficiencyIAT Level II CertificationCybersecurity Recommendations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentVulnerability ScanningRoot Cause AnalysisDocumentation ManagementCybersecurity Posture Analysis

Soft Skills

Exceptional Customer ServiceStrong Verbal/Written CommunicationInterpersonal SkillsProject ManagementTeam Collaboration

Tools & Technologies

EMASSCMRSHBSSESSMECMPhoenixACASNessusSTIG ViewerSCAP

Certifications & Qualifications

IAT Level II CertificationIAT/IAM III Certification

Industry Keywords

DoD Information AssuranceCybersecurity ProgramAuthorization BoundarySecurity Technical Implementation Guides (STIGs)Security Requirements Guides (SRGs)

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Coordinate with various stakeholders, e.g., Security Engineers, Network Administrators, System Administrators, Chief Information Officers (CIOs), Information Assurance Managers (IAMs) / Information Systems Security Managers (ISSMs), certification authorities (and representatives), accreditation authorities (and representatives), program managers, vendors, etc., necessary to properly identify, document, mitigate, and manage risk attributed to the target system, network, and/or application;
Identify, develop (directly or in coordination with applicable experts), and incorporate common artifacts found in RMF authorization packages, e.g., system architecture and boundaries, hardware and software inventories, policies and procedures, risk assessment reports, POA&Ms, data flows, PPSM accounting, and other necessary system, network, and application documentation;
Apply knowledge and experience in identifying, assessing, and documenting compliance against applicable DoD Information Assurance (IA) security controls (technical, management, operational), Service (e.g., Army) regulations, etc., within the RMF package;
Apply knowledge of, and ability to use, applicable compliance and authorization reporting environments (e.g., eMASS, CMRS) to document the progress of RMF risk assessments;
Conduct root cause analysis for inconsistencies or shortfalls in system cybersecurity posture;
Utilize vulnerability scanning and assessment tool results (e.g., ACAS/Nessus/STIG Viewer/SCAP) necessary to identify and document compliance while providing cybersecurity recommendations based on organizational requirements;
Analyze Host-Based Security System (HBSS) and/or Endpoint Security Solution (ESS) output and configurations;
Coordinate with system POCs, review authorization boundary diagrams, architecture/data flow diagrams, hardware/software inventories, IP address/subnet assignments, Med-COI Zone taxonomy, and other artifacts;
Utilize compliance and authorization reporting environments (e.g., eMASS, CMRS, COAMS, MECM, and Phoenix) and coordinate with system POCs to explain compliance requirements, assist in reaching compliance, and provide training;
Develop meeting agendas/briefings and lead/attend and speak in meetings with stakeholders to discuss status of efforts;
Apply NIST, DoD, and DHA security requirements to include NIST SP 800-53 controls, DISA Security Technical Implementation Guides (STIGs), and Security Requirements Guides (SRGs);
Submit Weekly Status Reports (WSRs), when applicable.

Requirements

What you’ll need

Clearance Level: Secret
Minimum Certifications: IAT Level II certification required; IAT/IAM III certification is a plus
Education / Experience: 10+ years of technical experience or a Bachelor's Degree and 6+ years of technical experience.
Minimum 5 years of RMF experience
Demonstrated experience with eMASS or similar RMF application.
Proficient at providing exceptional customer service.
Familiarity with NIST SP 800-53, DISA STIGS/SRGs, CMRS, HBSS/ESS, MECM and Phoenix.
Aptitude to provide thought leadership to enterprise CIO/ISSM efforts to maintain an organizational or system-level cyber security program.
Ability to identify, interpret and evaluate major applications, infrastructure, enclaves, and enterprise system environments based on proposed authorization boundaries.
Ability to manage multiple projects simultaneously and thrive in a remote environment.
Ability to work independently while also contributing to team member productivity.
Must possess strong verbal/written communications and interpersonal skills.

Benefits

Comp & perks

Voluntary Medical, Dental, Vision, with Flexible Spending Plan options
Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
Generous 401(k) match
Competitive PTO plan that graduates quickly with years of service
Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty
Tuition reimbursement
Professional development reimbursement
Recognition and Awards programs