ZipRecruiter

Log In

2

Remote Rmf Jobs in Gaithersburg, MD (NOW HIRING)

Rackner

DevSecOps (Kubernetes) Engineer SME

Washington, DC · Remote

$64.50 - $85.75/hr

Remote About this role: * Rackner is seeking an DevSecOps (Kubernetes) Engineer SME to support a US ... Ensure platform and pipelines are compliant with DoD cybersecurity policies (NIST 800-53/RMF, STIGs)

SixGen, Inc.

ISSO (TS/SCI & CIPOLY)

Columbia, MD · On-site +1

The ideal candidate will possess deep knowledge of Risk Management Framework (RMF), cybersecurity ... Flexible and remote work policies for most positions * Flexible PTO and holiday schedule For more ...

NTT DATA Services

DevSecOps Engineer

Bethesda, MD · Remote

$65K - $136K/yr

We are currently seeking a DevSecOps Engineer to join our team in Bethesda (REMOTE), Maryland (US ... Knowledge of DoD RMF, IL4/IL5, and FedRAMP requirements for cybersecurity and compliance * Strong ...

NTT DATA Services

Backend / API Engineer

Bethesda, MD · Remote

$68K - $141K/yr

We are currently seeking a Backend / API Engineer to join our team in Bethesda (REMOTE), Maryland ... Ensure all backend components comply with DoD IL4, FedRAMP, RMF, and cybersecurity requirements

Maximus

Security Compliance Architect

VA · On-site +1

$65.25 - $84.25/hr

... 15, 2026 City Remote Country United States Working time Full-time Description & Requirements ... This role leads to RMF activities, develops authorization artifacts, and ensures adherence to ...

next page

Showing results 1-20

All JobsRemote Rmf JobsRemote Rmf Jobs in Gaithersburg, MD

Remote Rmf information

See Gaithersburg, MD salary details

$31.9K

$102.6K

$184.2K

How much do remote rmf jobs pay per year?

As of Jun 26, 2026, the average yearly pay for remote rmf in Gaithersburg, MD is $102,563.00, according to ZipRecruiter salary data. Most workers in this role earn between $53,500.00 and $137,800.00 per year, depending on experience, location, and employer.

What is a Remote RMF job?

A Remote RMF (Risk Management Framework) job involves managing cybersecurity risk and compliance for an organization while working remotely. Professionals in this role ensure that IT systems align with federal security standards, such as those outlined by NIST. Responsibilities may include conducting risk assessments, implementing security controls, and maintaining compliance documentation. Remote RMF specialists often work with government agencies, contractors, or private companies handling sensitive data. This position requires expertise in cybersecurity policies, risk management, and regulatory compliance.

What are the typical daily responsibilities of a Remote RMF Specialist?

As a Remote RMF Specialist, your daily responsibilities often include conducting security assessments, preparing and reviewing authorization packages, and ensuring ongoing compliance with federal information security standards. You'll collaborate with cross-functional teams to identify risks, develop mitigation strategies, and document security control implementations. Regular communication with stakeholders, participation in virtual meetings, and continual monitoring of systems and processes to ensure compliance are also core aspects of the job. This role leverages remote work tools to collaborate effectively with cybersecurity, IT, and compliance professionals across multiple locations.

What are the key skills and qualifications needed to thrive in the Remote Rmf position, and why are they important?

To thrive as a Remote RMF (Risk Management Framework) Specialist, you need a strong understanding of information security principles, federal risk management frameworks (such as NIST SP 800-37), and relevant cybersecurity policies, typically backed by a degree in information security or related field. Familiarity with security assessment tools, governance, risk, and compliance (GRC) software, as well as certifications like CISSP, CAP, or CISM, is highly valued. Excellent organizational skills, attention to detail, and the ability to communicate complex security concepts clearly are important soft skills. These capabilities are critical to ensure regulatory compliance and robust information system security in a remote work context.

What are popular job titles related to Remote Rmf jobs in Gaithersburg, MD? For Remote Rmf jobs in Gaithersburg, MD, the most frequently searched job titles are:
What job categories do people searching Remote Rmf jobs in Gaithersburg, MD look for? The top searched job categories for Remote Rmf jobs in Gaithersburg, MD are:
What cities near Gaithersburg, MD are hiring for Remote Rmf jobs? Cities near Gaithersburg, MD with the most Remote Rmf job openings:
Remote Rmf jobs near you
Cybersecurity Cloud Subject Matter Expert (SME)

Cybersecurity Cloud Subject Matter Expert (SME)

VivSoft Technologies

Herndon, VA • Remote

$57 - $76.25/hr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 10 days ago

Job description

Job Title: Cybersecurity Cloud Subject Matter Expert (SME)
Location: Remote, USA
Clearance Required: DoD Secret Clearance
Position Type: Full-Time 
About the company:  
At VivSoft, we aim to solve complex federal problems using emerging and open technologies in a collaborative and rewarding environment. VivSoft is a diverse team of strategists, engineers, designers, and creators experienced in building high-performance, effective software, with a focus on impactful organisational design and software delivery dynamics. We build secure Software Factories based on DoD reference designs and NIST Frameworks for Cloud and DevSecOps. These factories deliver AI/ML Applications, Data Science Platforms, Blockchain and Microservices for DoD, Healthcare and Civilian Agencies
Job Summary:
The Cybersecurity Cloud Subject Matter Expert (SME) is responsible for ensuring the secure architecture, design, and deployment of Department of Defense (DoD) cloud‑hosted IT systems. This role provides expert guidance to ensure systems comply with DoD cybersecurity requirements, Risk Management Framework (RMF), and FedRAMP standards. The SME supports programs throughout the Authorization to Operate (ATO) lifecycle, enhances cloud security posture, and provides technical leadership for cybersecurity assessments within enterprise and compartmented cloud environments.
Key Responsibilities:
  • Design, review, and validate secure cloud architectures for DoD IT systems hosted in OCI, AWS, Azure, or equivalent platforms.
  • Ensure cloud‑hosted systems meet DoD cybersecurity, RMF, and FedRAMP compliance requirements.
  • Support the full ATO lifecycle, including SSP development, security control implementation, POA&M management, and coordination with Authorizing Officials.
  • Review cloud security policies, standards, and procedures; provide recommendations to improve security posture.
  • Apply current knowledge of cloud security threats, vulnerabilities, and engineering best practices to mitigate risk.
  • Provide cybersecurity guidance throughout system and application deployment lifecycles.
  • Advise and support assessment teams conducting Cybersecurity Vulnerability Assessments (CVAs) for cloud environments.
  • Support continuous monitoring, detection, incident response, and reporting for cloud‑hosted systems.
  • Collaborate with program managers, engineers, and security teams to integrate cybersecurity requirements across enterprise DoD IT environments.

Skills and Qualifications Required:
  • Must possess an active DoD secret clearance
  • Minimum 2 years of experience achieving ATOs in cloud environments (OCI, AWS, Azure, or similar).
  • Minimum 5 years of experience supporting and achieving ATOs for DoD compartmented IT systems.
  • Demonstrated experience applying FedRAMP assessment methodology to cloud‑hosted systems.
  • Hands‑on experience working with Oracle Cloud Infrastructure (OCI).
  • Experience supporting enterprise‑level DoD IT systems.
  • Experience supporting systems through the full RMF lifecycle, including continuous monitoring.
  • Knowledge of modern cloud security threats and defensive strategies
  • Strong written and verbal communication skills to advise technical and non‑technical stakeholders

Certifications Required:
  • At least one cloud certification (OCI, AWS, Azure, or equivalent)

Benefits:  
  • Comprehensive Medical, Dental, and Vision Plans (Healthcare benefits are 100% employer-paid for employees only)  
  • Life Insurance  
  • Paid Time Off (Flexible/Combined PTO, Bereavement Leave, 11 Company Paid Holidays)  
  • 401K Retirement Plan with employer match  
  • Professional Development Training Reimbursement

Powered by JazzHR

9tDhXJHzk4