Cybersecurity Engineer - DoD RMF & Authorization

Summary

This role supports Department of Defense Risk Management Framework (RMF) authorization and compliance activities for information systems. The engineer will evaluate system architectures and security controls against NIST SP 800-53, DoDI 8510.01, and DISA STIGs; coordinate with security teams and government stakeholders; review vulnerability assessments from tools like ACAS, Nessus, and SCAP; develop and maintain Plans of Action and Milestones (POA&Ms); and provide technical guidance on secure configurations, OS hardening, and network security. The role requires 6–8 years of DoD cybersecurity or systems administration experience, hands-on RMF documentation expertise (SSPs, control statements, ATOs/IATTs), proficiency with eMASS, and strong knowledge of Linux, Windows, virtualization, and networking fundamentals.