risk-management-framework jobs in San Diego

This Systems Engineer II role focuses on DoD cybersecurity compliance, vulnerability remediation, and production software deployments in defense environments. The engineer will implement DISA STIG compliance, Risk Management Framework (RMF) standards, and maintain continuous security monitoring (SIEM, intrusion detection) across heterogeneous Linux and Windows server environments.…See more The role requires hands-on execution of zero-downtime deployment strategies, Agile/SAFe methodologies, and enterprise virtualization (VMware, AWS), with strong emphasis on Information Assurance and DoD 8140 cyber workforce standards.

The Cybersecurity Engineer III will support Assessment and Authorization accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include analyzing cybersecurity directives and policies (CTOs, FRAGOs, IAVMs, STIG requirements), developing compliance strategies aligned with federal and defense security standards, and performing risk analysis and independent verification of security configurations.…See more The role requires in-depth Risk Management Framework knowledge, FISMA data reporting support, and use of compliance tracking tools such as VRAM. This position requires a Secret clearance, IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), and 10+ years of cybersecurity or incident response experience.

Senior Systems Engineer leading infrastructure design and integration on Department of Defense programs. Must demonstrate depth in enterprise networking, virtualization/hyperconverged infrastructure, or storage architecture, with working knowledge of DoD cybersecurity compliance (STIGs, eMASS, RMF).…See more Responsible for taking infrastructure from current-state assessment through design, build, test, and customer acceptance, producing engineering documentation and coordinating with OEMs and technology partners. Active Secret clearance required.

Design, configure, and sustain mission-critical networked systems using Cisco, Aruba, Juniper, and specialized hardware. Support end-to-end lifecycle activities including staging, integration, testing, fielding, and sustainment of DoD networks.…See more Implement secure architectures aligned with RMF and STIGs, perform system hardening and vulnerability remediation, and troubleshoot networks in labs, shore facilities, and deployed environments. Requires 8+ years of hands-on network engineering experience, DoD Secret clearance, and a DoD 8570/8140 baseline certification (Security+ CE minimum).

Design, develop, and test secure software using C++, Java, C#, or similar languages, creating novel cybersecurity technology components to defend against cyber exploits and attacks. Responsibilities include developing kernel and user-level software with security-first principles, conducting vulnerability assessments, implementing CI/CD and DevSecOps processes, and using Infrastructure as Code tools like Ansible and Terraform to deploy and configure systems.…See more Perform code reviews, validate security controls (STIGs, CMMC), participate in Risk Management Framework processes, and document software for accreditation. Partner with multidisciplinary teams and government sponsors to integrate custom and third-party components across complex systems.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SAR), and managing eMASS tasking including quarterly IV&V, STIG checks, and annual security reviews.…See more The role requires 10+ years of cybersecurity or incident response experience, a Secret clearance, IAM II certification, and one of CAP, CASP, CISM, CISSP, or GSLC. The engineer must demonstrate proficiency in security testing, auditing, risk assessment, and IT security tools.

Design and own the end-to-end orchestration architecture for a command-and-control decision-support system (ASSIST), connecting multiple services, models, and simulations into integrated tactical applications. Define service interfaces, data-flow patterns, and standards for invoking models as services; guide prototyping of tactical decision applications integrated with MTC2 and GCCS APIs.…See more Establish architecture for scalable, distributed processing across hundreds of units and set the technical roadmap for deployment to classified networks under the Risk Management Framework. Requires 10+ years of software/systems engineering with 5+ recent years in architecture on command-and-control or decision-support systems, active DoD Secret clearance with SIPRNET access, and DoD 8570/8140 IAT/IASAE Level II or III certification.

The Cybersecurity Engineer will coordinate cybersecurity activities including preparation and maintenance of Risk Management Framework (RMF) artifacts, risk and vulnerability assessments across network/system/application domains, and day-to-day cyber operations. The role requires performing compliance testing, implementing security controls and policies, working with tools like eMASS and ACAS, and developing security documentation for DoD/government systems up to TS/SCI classification.…See more The candidate must work independently, identify risks and devise mitigation solutions, and communicate findings to both technical and non-technical stakeholders. A bachelor's degree and DoD 8140 qualification (equivalent to former DoD 8570 IAT II) are required, along with 3+ years in cybersecurity, T&E, or Authorization & Accreditation roles.

SAIC seeks an IT Systems Engineer to support U.S. Navy cyber operations, providing engineering and technical support for the CND Deployer Toolkit and Defensive Cyber Operations Infrastructure.…See more Responsibilities include production integration, system design and architecture, interoperability testing, RMF compliance, Sensor2 system installation and site surveys, patch management, and sustainment troubleshooting. The role requires hands-on experience with Linux, Splunk, VMware, Kubernetes, vulnerability scanning (ACAS, STIG), Windows OS, and network infrastructure, with DoD 8570 IAT Level II certification and an active Secret clearance required.

Network engineer responsible for designing, configuring, and sustaining mission-critical networked systems for DoD/government customers. Will engineer Cisco, Aruba, Juniper, and other switching/routing/firewall platforms; support full system lifecycle from staging through fielding and sustainment; implement secure architectures aligned with RMF and STIGs; and conduct site surveys, deployments, and troubleshooting in labs, shore facilities, and deployed environments.…See more Requires minimum 8 years of hands-on network engineering experience, DoD Secret clearance, relevant vendor certifications (CCNA/JNCIA or higher), and DoD 8570/8140 baseline security certification (Security+ CE minimum).

Network engineer providing advanced engineering, integration, and sustainment support for Navy AT/FP systems across global installations. You will engineer, configure, and sustain Juniper, Aruba, Cisco, and Cambium networking equipment; support end-to-end system lifecycle from staging through fielding; implement secure architectures aligned with RMF and STIGs; and conduct site surveys, installations, and operational verification during 50%+ travel.…See more Requires active interim Secret clearance with ability to obtain fully adjudicated clearance, Bachelor's degree with 5 years' experience (or HS/GED with 8 years), DoD 8570/8140 baseline certification, and hands-on experience with Juniper Junos, Aruba, and Cisco platforms.

Lead the full system development lifecycle for government programs, from requirements analysis and design through verification, validation, and sustainment. Manage requirements decomposition, allocation, and traceability; define system architecture and CONOPS using Model Based Systems Engineering (MBSE) methodologies; identify and mitigate technical risks associated with secure hardware; and produce comprehensive technical documentation.…See more Participate in customer meetings and technical interchanges; requires 12+ years of systems engineering experience, a Bachelor's degree in Systems Engineering or related field, and demonstrated expertise in requirements management, MBSE, the V-model, and Risk Management Framework (RMF) on medium-to-large DoD programs.

Design, engineer, configure, and sustain mission-critical networked systems for DoD customers, including Cisco (Catalyst, ISR, ASA/Firepower), Aruba (switching and wireless), Juniper (EX, QFX, SRX), and Cambium microwave solutions. Support end-to-end lifecycle from staging and integration through testing, fielding, and sustainment in NIWC labs, shore facilities, and data centers.…See more Implement secure network architectures aligned with Risk Management Framework (RMF) and Security Technical Implementation Guides (STIGs), perform system hardening and vulnerability remediation, and conduct site surveys and installations during frequent travel. Requires minimum 8 years of DoD or enterprise network engineering experience, DoD 8570/8140 baseline certification (Security+ minimum), and vendor certifications (JNCIA/CCNA or higher).

As a Network Engineer supporting Naval installations, you will design, configure, and sustain advanced networking infrastructure (Juniper, Aruba, Cisco) across shore facilities and data centers worldwide. You will engineer secure network architectures aligned with DoD Risk Management Framework and STIGs, perform system hardening and vulnerability remediation, and support end-to-end lifecycle operations from staging through fielding.…See more The role requires 8 years of hands-on network engineering experience, DoD Secret clearance, and DoD 8570 baseline certifications (Security+ CE minimum), with 50%+ travel to support CONUS and OCONUS operations.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing A&A documentation such as System Security Plans (SSP) and Security Assessment Reports (SARs).…See more The role requires in-depth knowledge of the Risk Management Framework, eMASS workflow, DISA compliance, and security categorization overlays. A minimum of 10+ years of cybersecurity or incident response experience is required, along with security certifications such as CISSP, CASP, CISM, CAP, or GSLC.

The Information System Security Officer (ISSO) serves as a steward of classified and high-side information systems, ensuring security compliance and operational resilience in accordance with DoD and DCSA standards. The role involves executing Risk Management Framework (RMF) activities, pursuing Authorization to Operate (ATO) via eMASS, conducting vulnerability scanning with tools like Nessus, and maintaining compliance with NISP and federal requirements.…See more Responsibilities include hands-on system administration, security monitoring, patch management, data transfer operations, and collaborative work with industrial security teams to integrate technical and administrative controls. Success requires proven experience processing ATO packages, system administration skills, security compliance knowledge, and the ability to balance rigorous security controls with operational effectiveness.

Senior Systems Engineer responsible for full-lifecycle systems and network engineering for enterprise infrastructure, including design, implementation, integration, upgrade, sustainment, and security. Develops and maintains engineering documentation, assembles test plans and specifications, and supports cybersecurity and Risk Management Framework (RMF) documentation for system accreditation.…See more Conducts site surveys and assessments to recommend optimal configurations, and integrates emerging capabilities including AI, automation tools, and data visualization into enterprise workflows.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, including maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SARs), and managing eMASS tasking throughout the accreditation cycle.…See more The role requires in-depth knowledge of the Risk Management Framework, DISA circuit connections, and cloud service provider inheritance. This position requires a Secret clearance, IAT Level III certification, and one of several advanced certifications (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), plus 10+ years of cybersecurity or incident response experience.

Lead Information Assurance and security engineering for Navy tactical networks (CANES), managing end-to-end Risk Management Framework (RMF) authorization, hardening virtualized and cloud network stacks, and ensuring compliance across diverse naval environments. Develop and maintain security authorization artifacts (SSP, SAP/SAR, POA&M, ATO packages in eMASS), apply DISA STIGs and vulnerability management tools (ACAS, NESSUS, SCAP), and provide IA guidance for application integration aligned with DoDAF and Net-Ready KPP baselines.…See more Support developmental testing, audit response, and continuous monitoring while coordinating with PEO C4I, NIWC Pacific, and Fleet stakeholders. Mentor junior engineers and champion DevSecOps and STIG automation practices.

As a Network Engineer supporting Naval Information Warfare Center Pacific, you will engineer, configure, and sustain enterprise-grade networked systems (Juniper, Aruba, Cisco, Cambium) across Navy installations worldwide. You will manage the full system lifecycle from staging and integration through fielding and sustainment, implement secure network architectures aligned with RMF and STIGs, and deploy networks in labs, shore facilities, and field environments.…See more The role requires hands-on expertise in Layer 2/3 technologies, routing protocols, VPNs, wireless deployments, and vulnerability remediation, with 50%+ travel to support CONUS and OCONUS operations.

Information Systems Security Engineer II supporting DoD Ballistic Missile Defense C4I systems with cybersecurity engineering, vulnerability management, and Risk Management Framework activities. Responsibilities include implementing cybersecurity controls, conducting DISA STIG assessments, performing vulnerability scans with tools like ACAS and Nessus, managing patches, maintaining eMASS RMF artifacts, and coordinating remediation across Windows, Linux, Hyper-V, and network environments.…See more Must assess cybersecurity risk, document findings, and support system authorization while maintaining operational readiness in a DoD test, integration, and evaluation environment.

Network Engineer responsible for designing, configuring, and sustaining mission-critical networked systems including Cisco, Aruba, Juniper, Cambium, and Antaira equipment. The role spans end-to-end lifecycle activities: staging, integration, testing, fielding, and sustainment of networks in labs, shore facilities, and data centers.…See more Requires hands-on expertise in Layer 2/3 technologies, routing protocols (OSPF, BGP), VPNs, firewalls, and wireless deployments, with mandatory compliance to RMF and STIGs. Must hold or obtain a DoD Secret clearance and meet DoD 8570/8140 baseline certification (Security+, CISSP, CASP+, or higher) plus vendor certifications (JNCIA/CCNA or higher).

As a Network Engineer supporting Naval Information Warfare Center Pacific, you will engineer, configure, and sustain advanced networking equipment (Juniper, Aruba, Cisco) across Navy installations worldwide. You will design secure network architectures, implement RMF and STIG compliance, manage VLANs/routing/VPNs, support wireless deployments, and conduct site surveys and integration testing with 50%+ travel.…See more You must hold an active DoD Secret clearance, meet DoD 8570/8140 certification requirements (Security+ minimum), and have 8+ years of DoD or enterprise network engineering experience with hands-on expertise in Juniper, Aruba, and Cisco platforms.

As a Network Engineer supporting Naval Information Warfare Center Pacific, you will engineer, configure, and sustain advanced networking equipment (Juniper, Aruba, Cisco, Antaira, Cambium) across Navy installations worldwide. You will support the full system lifecycle—staging, integration, testing, fielding, and sustainment—of networked systems protecting mission-critical assets, implementing secure architectures aligned with RMF and STIGs, and conducting site surveys and operational verification testing during frequent travel (50%+).…See more The role requires hands-on expertise in Junos OS, ArubaOS, Cisco platforms, routing protocols (OSPF, BGP), VLANs, VPNs, firewalls, and vulnerability remediation, with a DoD 8570/8140 baseline certification and an active interim Secret clearance.

As a Network Engineer IV supporting Naval Information Warfare Center Pacific, you will engineer, configure, and sustain advanced Cisco, Aruba, Juniper, and other enterprise networking equipment for Navy Public Safety Systems. You will support the full system lifecycle—staging, integration, testing, fielding, and sustainment—across NIWC labs, shore facilities, and deployed environments.…See more Responsibilities include implementing secure network architectures aligned with Risk Management Framework (RMF) and Security Technical Implementation Guides (STIGs), performing system hardening and vulnerability remediation, and maintaining configuration baselines and technical documentation. You must hold or obtain a DoD Secret security clearance, possess DoD 8570/8140 baseline certification (Security+ CE minimum), and have 8+ years of hands-on network engineering experience with Juniper, Aruba, and Cisco platforms.