FiferAUDIT is CVP's AI automated RMF (Risk Management Framework) compliance solution. It accelerates the NIST 800-53 assessment process by intelligently scanning controls, generates assessment evidence, produces System Security Plan (SSP) narratives, and automates POA&M tracking. Built specifically for federal agencies navigating FISMA compliance. 

About the Role 

CVP NextLabs is hiring an RMF Forward Deployed Engineer (FDE) to install, configure, and train customers on FiferAUDIT. You will be the domain expert helping agencies automate their RMF workflows with FiferAUDIT. 

As an FDE-RMF you will deploy FiferAUDIT in customer environments (AWS, Azure, GCP), configure control mappings, train agency staff on the platform, and ensure successful adoption. You should be comfortable explaining RMF concepts to ISSOs and Security Engineers. 

This role requires the ability to obtain a Public Trust clearance 

• Deploy and configure FiferAUDIT in customer cloud environments (AWS, Azure, GCP) ensuring FedRAMP compliance boundaries are met 
• Map customer system boundaries to NIST 800-53 control families and assist with control inheritance documentation 
• Conduct FiferAUDIT training sessions for agency ISSOs, Security Engineers, and System Owners 
• Troubleshoot and resolve deployment issues, integration problems, and user questions 
• Translate customer RMF workflow challenges into product configuration solutions 
• Document customer configurations, deployment architectures, and training materials 
• Travel up to 50% to customer sites (primarily in the DC area) for on-site implementation, workshops, and relationship building 
• Provide feedback to the product team on customer use cases, usability improvements, and feature requests 

• Have a deep expertise with NIST 800-53 controls and the full RMF lifecycle (from categorization through continuous monitoring) 
• Retain 3+ years of hands-on experience with RMF implementations at federal agencies 
• Hold experience with FISMA compliance, FedRAMP authorizations, or agency-specific security assessments 
• Maintain excellent communication skills. You can explain RMF concepts to both technical and non-technical audiences 
• Can simplify complexity, make fast, sound decisions under pressure 
• Possess Active Public Trust clearance OR ability to obtain one (required) 
• Are humble, collaborative, and eager to help others 

Preferred Qualifications 

Experience as an ISSO, Security Control Assessor, or Certifying Official at a federal agency 

Experience with tools like CSAM/JCAM, Xacta, RSA Archer, or other GRC platforms 

Certifications: CISSP, CAP, CISM, or equivalent