ZipRecruiter

Log In

2

Remote Rmf Jobs in Washington (NOW HIRING)

Whitespace

DevSecOps Engineer

Alexandria, VA · Remote

Remote / Alexandria, VA Clearance: Preferred US Gov Secret or above clearance (not a hard ... Implement and manage DoD STIGs, DISA baselines, and RMF controls in Infrastructure as Code (IaC)

ManTech

Enterprise AI Security Engineer

Washington, DC · Remote

$141K - $236K/yr

This role supports Authorization and Accreditation (A&A), Risk Management Framework (RMF) ATO ... For Remote Opportunities), education and certifications as well as Federal Government Contract ...

SAIC

Cybersecurity Engineer - ISSO

Vienna, VA · On-site +1

$160K - $200K/yr

None Potential for Remote Work: ORA_ON_SITE Description SAIC is seeking a Cyber Security Engineer ... Execute RMF processes for Assessment & Authorization (A&A). * Develop/maintain SSPs, POA&Ms, SARs ...

previous pagenext page

Showing results 21-40

All JobsRmf JobsRemote Rmf JobsRemote Rmf Jobs in Washington

Remote Rmf information

What is a remote RMF?

A Remote RMF (Risk Management Framework) job involves managing cybersecurity risk and compliance for an organization while working remotely. Professionals in this role ensure that IT systems align with federal security standards, such as those outlined by NIST. Responsibilities may include conducting risk assessments, implementing security controls, and maintaining compliance documentation. Remote RMF specialists often work with government agencies, contractors, or private companies handling sensitive data. This position requires expertise in cybersecurity policies, risk management, and regulatory compliance.

What are the typical daily responsibilities of a remote RMF?

As a Remote RMF Specialist, your daily responsibilities often include conducting security assessments, preparing and reviewing authorization packages, and ensuring ongoing compliance with federal information security standards. You'll collaborate with cross-functional teams to identify risks, develop mitigation strategies, and document security control implementations. Regular communication with stakeholders, participation in virtual meetings, and continual monitoring of systems and processes to ensure compliance are also core aspects of the job. This role leverages remote work tools to collaborate effectively with cybersecurity, IT, and compliance professionals across multiple locations.

What are the key skills and qualifications needed to thrive in the remote RMF position, and why are they important?

To thrive as a Remote RMF (Risk Management Framework) Specialist, you need a strong understanding of information security principles, federal risk management frameworks (such as NIST SP 800-37), and relevant cybersecurity policies, typically backed by a degree in information security or related field. Familiarity with security assessment tools, governance, risk, and compliance (GRC) software, as well as certifications like CISSP, CAP, or CISM, is highly valued. Excellent organizational skills, attention to detail, and the ability to communicate complex security concepts clearly are important soft skills. These capabilities are critical to ensure regulatory compliance and robust information system security in a remote work context.

What are popular job titles related to Remote Rmf jobs in Washington? For Remote Rmf jobs in Washington, the most frequently searched job titles are:
What job categories do people searching Remote Rmf jobs in Washington look for? The top searched job categories for Remote Rmf jobs in Washington are:
What cities in Washington are hiring for Remote Rmf jobs? Cities in Washington with the most Remote Rmf job openings:
Remote Rmf jobs near you
Infographic showing various Remote Rmf job openings in Washington as of August 2026, with employment types broken down into 90% Full Time, 6% Part Time, and 4% Contract. Highlights an 85% Physical, 6% Hybrid, and 9% Remote job distribution.

Cybersecurity A&A Subject Matter Expert

Magnus Management Group LLC

Washington, DC • Remote

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 28 days ago

Job description

Benefits:
  • 401(k)
  • Dental insurance
  • Health insurance
  • Paid time off
  • Vision insurance

Job Summary
We are seeking an experienced Cybersecurity Assessment & Authorization (A&A) Subject Matter Expert (SME) to support Department of Defense (DoD) cybersecurity programs. The A&A SME will lead Risk Management Framework (RMF) activities, support the Authorization to Operate (ATO) lifecycle, and provide expert guidance on cybersecurity compliance for complex enterprise environments, including traditional IT, cloud-hosted systems, operational technology (OT), applications, and outsourced IT services. The position requires expertise in NIST SP 800-53, DoD cybersecurity policies, and enterprise risk management.
 
Key Responsibilities
  • Serve as the cybersecurity SME for Assessment & Authorization (A&A) and RMF activities.
  • Lead and support the development, review, and maintenance of RMF authorization packages, including SSPs, SARs, POA&Ms, and ATO documentation.
  • Assess security controls in accordance with NIST SP 800-53 and DoD cybersecurity requirements.
  • Evaluate vulnerabilities, determine residual risk, and recommend risk mitigation strategies to support authorization decisions.
  • Conduct security control assessments and continuous monitoring activities to maintain system authorization.
  • Support enterprise cybersecurity compliance for on-premises, cloud, and hybrid environments.
  • Advise Information System Owners (ISOs), ISSMs, ISSOs, engineers, and Authorizing Officials throughout the RMF process.
  • Prepare executive-level briefings and communicate cybersecurity risks, authorization status, and remediation recommendations to senior leadership.
  • Ensure compliance with DoD cybersecurity policies, DISA STIGs, and applicable federal security standards.
Minimum Qualifications
  • Experience: Minimum five (5) years of relevant experience in Assessment & Authorization (A&A), Certification & Accreditation (C&A), Risk Management Framework (RMF), and NIST cybersecurity compliance within a DoD environment.
  • Demonstrated experience conducting security control assessments and authorization reviews for large, complex organizations.
  • Strong knowledge of NIST SP 800-53, DoDI 8510.01, DoD RMF, continuous monitoring, and cybersecurity governance.
  • Excellent analytical, technical writing, communication, and briefing skills.
Education
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (or equivalent experience, if permitted by contract).
 
Certifications
 
Required: DoD 8570/8140 Baseline Certification – IAM Level III (e.g., CISSP, CISM, GSLC, or equivalent approved certification).

This is a remote position.