rmf jobs in San Diego

This role owns the design, configuration, administration, and operation of BMC Remedy AR System 9.1 and related ITSM modules (Incident, Problem, Change, Request, Asset, Knowledge) for an enterprise government client. The engineer will lead system upgrades and migrations, optimize CMDB data quality and reconciliation, automate service request workflows using Python/PowerShell, manage integrations via REST/SOAP APIs, ensure security compliance (RMF/ATO), and provide Tier 3 support while mentoring junior admins.…See more The position requires 5+ years in systems engineering and 3+ years hands-on BMC Remedy administration, with demonstrated expertise in AR System workflows, database administration (Oracle/SQL Server), and ITIL process implementation.

Design, build, and operate an enterprise ITSM platform centered on BMC Remedy AR System 9.1, managing the full application stack (Incident, Problem, Change, Request, Knowledge, Asset modules) plus Smart IT, Digital Workplace, and CMDB integrations. Lead system upgrades, patches, schema migrations, and maintain security compliance per RMF/ATO requirements.…See more Automate routine tasks and deployments using Python and/or PowerShell, optimize CMDB data quality, and provide Tier 3 support and mentorship to junior administrators.

Manage cybersecurity and operations of multiple classified systems, including development and maintenance of enterprise-wide RMF security policies, continuous monitoring, and compliance with federal and DoD standards. Lead and mentor security personnel while overseeing System Security Plan creation, security audits, incident investigation, and risk assessments across complex networks and systems at multiple classification levels.…See more Maintain DoD 8570.01-M certification (CISSP, CISM, CCISO, or GSLC) and an active TS/SCI clearance, with 10+ years of professional experience in classified government environments.

Senior Cyber Systems Engineer responsible for developing and maintaining RMF artifacts (SSPs, SARs, SAPs, POA&Ms), coordinating with Navy Authorizing Officials and Security Control Assessors, and managing cybersecurity authorization packages for ATO/IATT/IATO activities. The role involves vulnerability remediation, STIG compliance, access control policy development, patch management, and server/network infrastructure oversight.…See more Requires mastery of the Risk Management Framework, CI/CD security pipelines, container hardening (Docker/Kubernetes), infrastructure-as-code tools (Terraform, Ansible), and automated security assessment tools (ACAS/Nessus). Serves as Information Systems Security Manager (ISSM) for product ATOs and coordinates with government agencies to ensure DoD and Navy cyber security requirements are met.

Lead information systems security for a cleared defense contractor, managing a team of ISSOs and Security Administrators through the RMF process while ensuring compliance with NISPOM, DCSA, and NIST 800-53 standards. Responsibilities include vulnerability management, STIG compliance, security incident investigation, insider threat coordination, and preparation for DCSA assessments.…See more Requires 8+ years IT experience with 5+ years as an ISSM in a cleared facility, proficiency in Windows/Linux, eMASS, Tenable, SIEM tools, and IAM Level 3 certification (CISSP, CISM, or GSLC). Strong background in container orchestration, infrastructure automation, and DevSecOps methodologies is valued.

Senior Technical Integration Lead responsible for integrating machine learning and AI capabilities into operational defense software systems. The role requires expertise in modern software architecture (MOSA, API-first, edge computing), DevSecOps, CI/CD practices, cybersecurity frameworks (RMF), and product management principles.…See more The person will work across Government and development stakeholders at NIWC-Pacific, managing rapid capability delivery and iterative acquisition approaches within secure, on-site environments.

Network engineer providing advanced engineering, integration, and sustainment support for Navy anti-terrorism/force protection networked systems. Responsibilities include engineering and configuring Juniper, Aruba, Cisco, Antaira, and Cambium network equipment; deploying and troubleshooting networks across labs, shore facilities, and data centers; implementing secure architectures aligned with RMF and STIGs; performing system hardening and vulnerability remediation; and conducting site surveys and installations during 50%+ travel.…See more Requires an active interim Secret clearance with ability to obtain fully adjudicated Secret clearance, bachelor's degree and 5 years of network experience (or HS diploma and 8 years), DoD 8570/8140 baseline certification, and hands-on expertise with Juniper, Aruba, and Cisco platforms.

Lead cybersecurity program delivery for NSWC Corona's Risk Management Framework and continuous authorization services. Manage a team of ISSMs, ISSOs, and cybersecurity analysts while serving as primary interface with Navy leadership and government stakeholders.…See more Oversee contract lifecycle, financials, and compliance across A&A packages and continuous monitoring; drive process improvements in eMASS workflows and RMF execution. Provide strategic guidance on DoD/Navy cybersecurity policy, emerging threats, and system acquisition integration.

Network Engineer III will design, implement, and maintain enterprise network infrastructure for a DoD environment, configuring and troubleshooting routers, switches, firewalls, and security devices. The role requires hands-on expertise in TCP/IP, OSPF, VLANs, IPsec, and network segmentation, with responsibility for vulnerability remediation, STIG compliance, and RMF requirements.…See more The engineer will coordinate cross-functional teams to resolve connectivity and interoperability issues, maintain network documentation and baselines, and support system integrations and upgrades in classified or highly regulated DoD networks. A Secret-level DoD security clearance is required, along with 5–7 years of progressive network engineering experience and Security+ certification.

Information System Security Officer III responsible for securing assigned networks, enclaves, and platform IT systems through vulnerability assessments, STIG compliance verification, and continuous monitoring. The role requires coordinating with engineers and developers to embed security throughout the system development lifecycle, managing RMF documentation and POA&M entries, conducting daily audit log and SIEM alert reviews, and supporting incident response and cyber inspections.…See more Must possess TS/SCI clearance, a bachelor's degree in IT/cybersecurity or equivalent experience, six years of hands-on security implementation and vulnerability analysis, and current DoD 8140/8570 IAM Level II certification.

This is a hands-on DevSecOps engineering role focused on designing and maintaining secure CI/CD pipelines, software supply-chain controls, and Kubernetes deployment standards. The engineer will work across Azure DevOps, Nexus, SonarQube, and container orchestration to integrate security and quality checks into build and release workflows, support platform engineering teams, and enable developers with documentation and automation.…See more Responsibilities include implementing SAST, SCA, dependency scanning, secrets management, artifact controls, and compliance alignments (NIST, CMMC, RMF, Zero Trust); troubleshooting pipeline and deployment failures; and creating runbooks and guardrails. The role requires 5+ years in DevOps/DevSecOps, hands-on Azure DevOps and Kubernetes experience, scripting proficiency, and an active Secret Clearance with eligibility for TS/SCI.

Principal Computer Systems Analyst supporting classified government contracts, responsible for managing multi-user computer systems including Windows Server administration, Active Directory, Group Policy, and domain architecture design. The role involves system maintenance, patching, monitoring, compliance enforcement, backup/recovery services, and coordination across IT/Cyber teams.…See more Requires current Top Secret clearance, Security+ certification, and 3–9 years of experience depending on educational background.

Senior Cybersecurity Engineer supporting Navy and DoD mission systems. The role involves applying cybersecurity engineering principles across the system lifecycle—building threat models (STRIDE, PASTA, attack trees), analyzing complex systems and networks for vulnerabilities, assessing cyber risk and mission impact, and translating findings into actionable engineering recommendations.…See more Requires 7+ years of industry experience, a Bachelor's in a technical field (Cybersecurity, Computer Science, Systems Engineering, or related), demonstrated threat-modeling expertise, and DoD 8570.01 IAM/IAT/IASAE certification.

Senior IT Cyber Security Specialist responsible for enterprise vulnerability scanning, system hardening, and patch management using tools like Nessus and HBSS. Administers security technologies including SIEM platforms, firewalls, endpoint protection, and VPNs while investigating security incidents and performing root cause analysis.…See more Requires 7+ years of progressive IT/cybersecurity experience in DoD or defense contractor environments, with strong Linux administration and Bash scripting skills. Must hold DoD 8570.1-M IAM Level III certification (CISSP, CISM, or GSLC) and maintain compliance with NIST SP 800-171, CMMC Level 2, and DISA STIGs.

Design, develop, integrate, and maintain IT systems and software components supporting Navy enterprise networks (PMW160/NIWC Pacific). Responsibilities include system automation using Ansible, PowerShell, and Python; hardware/software integration across Windows and Linux virtual infrastructures; DoD cybersecurity compliance (STIG, RMF); troubleshooting in lab and deployed environments; and supporting production installation and testing events.…See more Requires 4–7 years of IT systems experience, Security+ or CISSP plus an OS certification, and ability to obtain a Secret clearance or higher.

Lead ServiceNow Developer responsible for designing, implementing, and architecting enterprise ServiceNow solutions for federal government clients. Design security plans ensuring compliance with NIST, RMF, and DoD standards; mentor and coach ServiceNow talent; lead knowledge sharing; and drive client relationships and business growth through solution proposals and platform expertise.…See more Must have 5+ years of ServiceNow implementation/architecture experience, ServiceNow Certified System Administrator certification, and one of CISSP/Security+/CASP+/CISM, with active Secret Clearance required.

Lead the design, implementation, and optimization of ServiceNow solutions for enterprise clients, including platform architecture, system integrations, and performance tuning. Provide technical oversight throughout the delivery lifecycle, ensure compliance with security standards and best practices, and mentor junior developers.…See more Manage stakeholder relationships, contribute to business development by identifying new service opportunities, and stay current with ServiceNow platform developments and industry trends.

Network engineer providing advanced engineering, integration, and sustainment support for Navy AT/FP networked systems worldwide. Responsible for engineering, configuring, and sustaining Juniper, Aruba, Cisco, and specialized switching solutions across NIWC labs, shore facilities, and data centers.…See more Requires hands-on expertise in enterprise networking (routing, VLANs, VPNs, firewalls), system hardening, RMF/STIG compliance, and field deployment with 50%+ travel. Must hold or obtain a Secret clearance and DoD 8570 baseline certification (Security+ or higher, plus Juniper/Cisco vendor certs).

Network Engineer responsible for engineering, configuring, and sustaining mission-critical networked systems including Cisco, Aruba, Juniper, and Cambium platforms. Manage end-to-end system lifecycle from staging through sustainment, deploy secure network architectures aligned with RMF and STIGs, and perform system hardening and vulnerability remediation.…See more Support integration in DoD labs, shore facilities, and data centers, with frequent travel to customer sites for installations, troubleshooting, and operational verification. Requires minimum 8 years of network engineering experience, DoD Secret clearance, and hands-on expertise in Juniper, Aruba, and Cisco switching, routing, and firewall technologies.

Cybersecurity Engineer responsible for comprehensive vulnerability management, security assessments, and risk mitigation across systems, networks, and data. Conducts STIG compliance checks, system security testing in lab and field environments, and collaborates with engineering teams on remediation prioritization and Risk Management Framework (RMF) documentation.…See more Requires Security+ certification, bachelor's degree in computer science or cybersecurity, or equivalent experience.

Network Engineer supporting Navy AT/FP systems sustainment, responsible for engineering, configuring, and maintaining advanced networking hardware (Juniper, Aruba, Cisco) across NIWC Pacific and Naval installations worldwide. The role requires hands-on deployment, integration, and troubleshooting of networked systems in lab and field environments, with emphasis on secure architectures aligned with RMF and STIGs.…See more Candidates must hold an active interim Secret clearance with ability to obtain full adjudication, DoD 8570/8140 baseline certification, and 5+ years of experience (or 8+ with HS diploma) with demonstrated expertise in enterprise routing, switching, wireless, and firewall platforms.

Design, engineer, and sustain mission-critical networked systems for DoD customers, with hands-on responsibility for Cisco, Juniper, and Aruba platforms across switching, routing, firewalls, and wireless. Deploy end-to-end network solutions in labs, shore facilities, and shipboard environments; implement secure architectures aligned with RMF and STIGs; perform system hardening and vulnerability remediation.…See more Requires 8+ years of network engineering experience, DoD Secret clearance, and DoD 8570/8140 baseline certification (Security+ minimum).

Lead the design, implementation, and optimization of ServiceNow solutions for enterprise clients, with 8+ years of experience architecting or implementing the platform. Provide technical oversight to ensure solutions meet quality standards, security requirements, and compliance regulations; manage integrations with third-party systems; and conduct performance analysis.…See more Mentor junior ServiceNow talent, communicate project status to leadership and clients, and identify new service opportunities to drive business growth.

Cloud Engineer III will design, deploy, and sustain secure cloud solutions across AWS, Azure, and government cloud environments (GovCloud, Azure Government) for mission-critical defense applications. The role requires deep expertise in cloud architecture, distributed systems, Infrastructure as Code, CI/CD pipelines, DevSecOps, containerization (Docker, Kubernetes), and cloud-native patterns.…See more You will work across cross-functional teams including engineers, cybersecurity personnel, and government stakeholders to architect hybrid cloud, edge-to-cloud, and enterprise platform solutions meeting DoD compliance standards (Impact Levels, Zero Trust, RMF, STIGs). Responsibilities include automating infrastructure, configuring security controls, managing cloud networking and identity, and communicating technical decisions and risks to technical and executive audiences.

As a Cybersecurity Engineer and Risk Analyst, you will identify vulnerabilities, assess security threats, and implement infrastructure and cybersecurity controls to protect military systems. You'll conduct risk and vulnerability assessments across networks, systems, and applications, work with Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes, and develop security solutions using tools like ACAS, STIGs, and eMASS.…See more The role requires 4+ years of DoD/government IT experience, hands-on cybersecurity compliance testing, and the ability to communicate complex security concepts to technical and non-technical audiences.