RMF Program Support Specialist Alexandria VA or Seaside CA

Overview

Must have an active Secret Clearance to be considered

Must be within 1 hour of Alexandria, VA or Seaside, CA

Nex Gen Technologies, Inc. is a leading IT services firm specializing in delivering innovative, high-quality solutions to our federal government clients. Our core competencies include IT professional support services, software development, cloud services, IT Operations, Agile project management, and GIS services.

Nex Gen is seeking a detail-oriented RMF Program Support Specialist to provide comprehensive support to the Defense Human Resources Activity (DHRA) in managing and maintaining the Risk Management Framework (RMF) program. The role supports enterprise-wide RMF activities by developing documentation, maintaining eMASS packages, tracking authorization workflows, coordinating with system owners, and ensuring compliance with DoD and DHRA cybersecurity requirements. The specialist works closely with Product Teams, Technical Services, system owners, and federal stakeholders to maintain accurate RMF records, support governance processes, and ensure timely execution of RMF tasks across all accreditation boundaries.

There are no supervisory responsibilities.

• Develop and maintain RMF documentation, including presentations, meeting notes, reports, and materials supporting KPIs and process improvements.
• Perform System Administrator functions in eMASS, including account provisioning, account maintenance, and workflow administration.
• Maintain and complete assigned eMASS workflows and package updates.
• Register and initiate DHA ATC workflows for DHRA systems requiring ATCs.
• Support the development, update, correction, and review of IP publications.
• Provide guidance to system boundaries regarding central logging requirements.
• Review and process Service Now tickets for assigned systems, including:
• ITS Categorization (CSD Forms 17 and 19)
• eMASS registration and decommission requests
• Log event verification (CSD Form 20)
• Annual Security Reviews
• Inheritance requests
• General system-related requests
• Review new systems for RMF applicability and readiness.
• Review, provide feedback, and sign Privacy Impact Assessments (PIAs) upon concurrence.
• Review and provide feedback for DHRA governance reviews for assigned systems.
• Other duties as assigned.

• 6+ years of experience supporting RMF programs within DoD or federal environments.
• Hands-on experience with eMASS, including package maintenance and workflow management.
• Familiarity with POA&M management, ATO Terms and Conditions, and RMF governance processes.
• Experience with Microsoft Project, SharePoint, MS Teams, and Service Now.
• Understanding of DoD cybersecurity requirements, NIST controls, and DHA/DHRA RMF processes.
• Ability to interpret and track compliance documentation and system boundary requirements.

• Experience supporting DHRA, DHA, or similar DoD components.
• Familiarity with DHA ATC workflows and cloud-hosted system RMF requirements.
• Experience developing process documentation, KPIs, or governance artifacts.
• Knowledge of central logging requirements and boundary-level cybersecurity controls.

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.

• Strong analytical, organizational, and documentation skills.
• Ability to work collaboratively across interdisciplinary teams and federal stakeholders.
• Must be able to pass background screening prior to employment.
• US Citizenship, legal permanent residence, or US work authorization with a minimum of 3 years of US presence is required due to federal contract requirements.
• Ability to work on-site at Seaside or Mark Center for SIPR-related activities as needed.
• Active Secret clearance required; ability to obtain TS/SCI preferred.

• Minimum 25% on-site at the Mark Center (Alexandria, VA) or DoD Center – Monterey Bay (Seaside, CA).
• Work hours:
  
  8 a.m. Eastern to 5 p.m. Pacific, Monday–Friday, excluding federal holidays or government closures.
• RMF and eMASS activities may occasionally require after-hours support with one-hour recall.