Cyber RMF/ATO Engineer

Integral Federal, Inc.; Tysons (VA); On-site; USD 148,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) with vesting

Paid Time Off

Bonuses

Training Reimbursement

Employee Assistance Program

Job summary

Integral Federal, Inc. is seeking a Cyber RMF/ATO Engineer to support VA products and environments, ensuring RMF compliance, ATO readiness, and continuous monitoring.

You will manage ATO packages, coordinate with VA teams, perform scans with Nessus/WASA/SCCD, document controls, and maintain eMASS artifacts. A Public Trust is expected; AWS VA Enterprise Cloud experience preferred.

Qualifications

• Bachelor's degree in CS or IT field with 7-10 years of experience.
• Deep knowledge of RMF, NIST 800-53, VA Handbook 6500 series, federal ATO processes, and VA cybersecurity standards.
• Familiar with VA-approved security tools: Nessus, WASA, SCCD, Pen testing tools, ConMon/Ongoing Authorization, eMASS, or ServiceNow CAM.
• Experience with continuous monitoring, logging, SIEM tools, intrusion detection, and incident response.
• Working knowledge of networks, distributed systems, application security, and vulnerability scanning of infrastructure and software.
• Excellent documentation and audit-readiness skills.
• Public Trust

Responsibilities

• Ensures continuous monitoring, vulnerability remediation, audit support, secure configuration management, and documentation required for A&A and ongoing ATO sustainment
• Maintain and continuously update ATO packages for all supported products and environments.
• Facilitate VA A&A processes and coordinate with Product teams, VA OIS, and external partners to ensure RMF compliance.
• Ensure adherence to VA security policies, standards, federal law, and NIST SP 800‑37 Rev 2 guidelines.
• Coordinate and execute required VA security scans including Nessus, WASA, SCCD, WASA, and related assessments.
• Upload and track scan results in eMASS or other VA‑approved repositories.
• Maintain, update, and manage the full suite of ATO documentation
• Implement and maintain Continuous Monitoring and Operations Support CONOPS Plan.

Skills

RMF Knowledge

NIST 800-53

VA ATO processes

Vulnerability scanning

SIEM

eMASS

ConMon/Ongoing Authorization

Public Trust

Education

Bachelor's Degree in computer science or IT related degree

Tools

Nessus

WASA

SCCD

Pen testing tools

eMASS

ServiceNow CAM

Job description

Overview

The Cyber RMF/ATO Engineer is responsible for maintaining cybersecurity, RMF compliance, and ATO readiness for VA products and environments for the Department of Veterans Affairs (VA), Office of Information and Technology (OIT), Product Delivery Services (PDS), Benefits and Memorials (BAM), Memorial and Benefit Services (MBS) deliver secure, reliable, and effective Information Technology (IT) solutions that support the Department’s mission.

Responsibilities

• Ensures continuous monitoring, vulnerability remediation, audit support, secure configuration management, and documentation required for Assessment & Authorization (A&A) and ongoing ATO sustainment
• Maintain and continuously update ATO packages for all supported products and environments.
• Facilitate VA Assessment & Authorization (A&A) processes and coordinate with Product teams, VA OIS, and external partners to ensure RMF compliance.
• Ensure adherence to VA security policies, standards, federal law, and NIST SP 800‑37 Rev 2 guidelines.
• Coordinate and execute required VA security scans including:
• Nessus, Database Scans, Web Application Security Assessment (WASA), Security Configuration Compliance Data (SCCD), Threat Modeling, Penetration Tests, Continuous Monitoring (ConMon), and Ongoing Authorization (OA).
• Upload and track scan results in eMASS or other VA‑approved repositories.
• Maintain, update, and manage the full suite of ATO documentation
• Implement and maintain Continuous Monitoring and Operations Support CONOPS Plan.

Qualifications

Required:

• Bachelor’s Degree in computer science or IT related degree with 7-10 years' experience
• Deep knowledge of RMF, NIST 800‑53, VA Handbook 6500 series, federal ATO processes, and VA cybersecurity standards.
• Familiar with VA-approved security tools: Nessus, WASA, SCCD, Pen testing tools, ConMon/Ongoing Authorization, eMASS, or ServiceNow CAM
• Experience with continuous monitoring, logging, SIEM tools, intrusion detection, and incident response
• Working knowledge of networks, distributed systems, application security, and vulnerability scanning of infrastructure and software
• Excellent documentation and audit‑readiness skills
• Public Trust

Preferred:

• Experience with AWS VA Enterprise Cloud (VAEC)

Salary Range: $148,000 - $170,000

The above salary range represents a general guideline. Integral Federal considers a number of factors when determining base salary offers, such as the scope and responsibilities of the position and the candidate's experience, education, skills, and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and/or discretionary bonuses in addition to base pay.

Company Overview

Integral partners with federal defense, intelligence, and civilian leaders to tackle their most important challenges and deliver positive outcomes. Since our founding in 1998, we have helped clients leverage existing and emerging technologies to transform their enterprises, empower growth, drive innovation, and build sustainable success. The forward-leaning solutions we deliver are tailored to each mission with a focus on keeping our nation safe and secure.

Integral is headquartered in McLean, VA and serves clients throughout the country.

We offer a comprehensive total rewards package including paid parental leave and immediate vesting in our 401(k). Give us a try and become part of a curated group of professionals at Integral Federal!

Our package also includes:

Medical, Dental & Vision Insurance

Flexible Spending Accounts

Short-Term and Long-Term Disability Insurance

Life Insurance

Paid Time Off & Holidays

Earned Bonuses & Awards

Professional Training Reimbursement

Employee Assistance Program

Equal Opportunity Employer/Protected Veteran/Disability