Role OverviewInnovatus is seeking an experienced Risk Management Framework (RMF) Engineer to support Assessment & Authorization (A&A) activities for DoD systems in accordance with NIST and DoD RMF requirements. The role focuses on developing, maintaining, and managing RMF documentation and artifacts throughout the system lifecycle. This is a hybrid position that is mostly remote, with candidates based in the San Diego, CA or Norfolk/Suffolk, VA areas preferred to support occasional on-site collaboration, meetings, or program needs.
What You Will Do
Support system categorization, develop and update RMF artifacts, assess and evaluate implemented security controls, manage and validate RMF packages, and support continuous monitoring, ATO package preparation, and authorization/renewal processes.
Why It Might Be a Fit
The ideal candidate will have 3+ years of hands-on experience supporting DoD RMF processes and A&A activities, strong familiarity with NIST SP 800-53, RMF steps, and authorization workflows, and experience with eMASS (or similar authorization management systems).
Requirements
- Active DoD Secret security clearance (minimum)
- U.S. citizenship
- 3+ years of hands-on experience supporting DoD RMF processes and A&A activities
- Proven experience developing RMF artifacts (SSPs, CPs, control evidence, test plans, POA&Ms, etc.)
- Strong familiarity with NIST SP 800-53, RMF steps (per NIST SP 800-37 / DoDI 8510.01), and authorization workflows
- Experience with eMASS (or similar authorization management systems) for package management and artifact validation
Benefits
- Competitive salary and benefits package
- Mostly remote hybrid flexibility with work-life balance
- Opportunity to support high-impact DoD missions
- Professional growth in a mission-driven, veteran-friendly SDVOSB environment
- Collaborative culture focused on ethics, expertise, and results
]]>