Note: The job is a remote job and is open to candidates in USA. PingWind delivers cybersecurity and professional services to the federal government. The RMF / CSAM Analyst ensures continuous security authorization and compliance for a cloud-based IAM solution by managing RMF and CSAM activities, security controls, POA&M remediation, reporting, documentation, and federal cybersecurity requirements.
Responsibilities
- The RMF / CSAM Analyst ensures the IAM solution complies with FedRAMP requirements, OMB M-24-15 guidance, and NIST SP 800-63 Digital Identity Guidelines. They manage event logging to meet OMB M-21-31 standards and oversee proper encryption of data at rest (AES-256 with SHA-256) and data in transit (latest TLS protocols). The analyst supports Security Incident Management, maintains environment support documentation, and handles key user data encryption and protection requirements. In CSAM, they manage security controls and inheritance statements, track and remediate Plan of Action and Milestones (POA&M) items, support FISMA reporting and corrective action plans, address Continuous Diagnostics and Monitoring (CDM) findings, handle Common Vulnerabilities and Exposures (CVE) responses, and maintain the Cybersecurity Framework (CSF) scorecard at the required level or higher. Additional responsibilities include supporting supply chain risk management, data planning, federal records and Controlled Unclassified Information (CUI) handling, IT accessibility (Section 508), technology business management reporting, and project, risk, and schedule documentation needed to sustain the Authority to Operate (ATO)
Skills
- **Required Clearance:** Public Trust
- **Required Education:** Bachelors Degree
- **Required Experience:** 2 years
- Strong knowledge of NIST Risk Management Framework (RMF) and CSAM tool
- Experience with FedRAMP, FISMA, POA&M management, and security control inheritance
- Familiarity with NIST SP 800-63, OMB M-21-31, and cloud security requirements
- Ability to analyze scan results, develop corrective action plans, and track remediation
- Excellent documentation, organization, and attention to detail skills
- Clear communication and collaboration with ISSOs, security teams, and stakeholders
- Understanding of data encryption, logging, and compliance reporting
- Proficiency with Microsoft Office tools and compliance tracking systems
- Ability to work effectively on both routine compliance tasks and urgent security issues
- Commitment to maintaining high cybersecurity standards in a federal environment
- Detail-oriented with excellent documentation and tracking skills
- Good understanding of federal cybersecurity policies and compliance requirements
- Team player capable of supporting both routine compliance and urgent security tasks
Benefits
- Eleven Federal Holidays
- Paid Time Off accrued each pay period
- Parental Leave
- Three medical plan choices with generous employer contribution
- Dental and Vision Insurance
- Company paid Short-Term and Long-Term Disability
- Company paid Life and AD&D Insurance
- 401k with competitive matching and vesting schedule
- Continuing education assistance
- Short Term / Long Term Disability & Life Insurance
- Medical, Dependent Care and Commuter Flexible Spending Accounts
- Employee Assistance Program
- Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
- 529 College Savings Plan
- Legal Insurance
- Pet Insurance
- Remote work
Company Overview
Company H1B Sponsorship