Forward Deployed Engineer - RMF

Overview

FiferAUDIT is CVP's AI automated RMF (Risk Management Framework) compliance solution. It accelerates the NIST 800-53 assessment process by intelligently scanning controls, generates assessment evidence, produces System Security Plan (SSP) narratives, and automates POA&M tracking. Built specifically for federal agencies navigating FISMA compliance. 

About the Role 

CVP NextLabs is hiring an RMF Forward Deployed Engineer (FDE) to install, configure, and train customers on FiferAUDIT. You will be the domain expert helping agencies automate their RMF workflows with FiferAUDIT. 

  

As an FDE-RMF you will deploy FiferAUDIT in customer environments (AWS, Azure, GCP), configure control mappings, train agency staff on the platform, and ensure successful adoption. You should be comfortable explaining RMF concepts to ISSOs and Security Engineers. 

  

This role requires the ability to obtain a Public Trust clearance 

Responsibilities

• Deploy and configure FiferAUDIT in customer cloud environments (AWS, Azure, GCP) ensuring FedRAMP compliance boundaries are met 
• Map customer system boundaries to NIST 800-53 control families and assist with control inheritance documentation 
• Conduct FiferAUDIT training sessions for agency ISSOs, Security Engineers, and System Owners 
• Troubleshoot and resolve deployment issues, integration problems, and user questions 
• Translate customer RMF workflow challenges into product configuration solutions 
• Document customer configurations, deployment architectures, and training materials 
• Travel up to 50% to customer sites (primarily in the DC area) for on-site implementation, workshops, and relationship building 
• Provide feedback to the product team on customer use cases, usability improvements, and feature requests 

Qualifications

• Have a deep expertise with NIST 800-53 controls and the full RMF lifecycle (from categorization through continuous monitoring) 
• Retain 3+ years of hands-on experience with RMF implementations at federal agencies 
• Hold experience with FISMA compliance, FedRAMP authorizations, or agency-specific security assessments 
• Maintain excellent communication skills. You can explain RMF concepts to both technical and non-technical audiences 
• Can simplify complexity, make fast, sound decisions under pressure 
• Possess Active Public Trust clearance OR ability to obtain one (required) 
• Are humble, collaborative, and eager to help others 

Preferred Qualifications 

Experience as an ISSO, Security Control Assessor, or Certifying Official at a federal agency 

Experience with tools like CSAM/JCAM, Xacta, RSA Archer, or other GRC platforms 

Certifications: CISSP, CAP, CISM, or equivalent 

 

About CVP

 

CVP is an award-winning healthcare and next-gen technology and consulting services firm solving critical problems for healthcare, national security, and public sector clients. We help organizations achieve lasting transformation.

 

CVP is an Equal Opportunity Employer dedicated to actively recruiting individuals and providing advancement opportunities based on merit and legitimate job qualifications. We ensure that all associates receive equal opportunities based on their personal qualifications and job requirements. CVP strictly prohibits any form of discrimination or harassment.

 

At CVP, we cultivate a work environment that encourages fairness, teamwork, and respect among all associated. We are committed to maintaining a workplace where everyone can grow both personally and professionally.