CYBER SECURITY SPECIALIST 4

VSolvit, LLC.; Sacramento (CA); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Tuition reimbursement

Job summary

VSolvit is seeking a Cybersecurity Specialist 4 to provide RMF security and compliance oversight for DoD environments, including legacy stacks and the transition toward Zero Trust Architecture, with emphasis on ATO deadlines. The role involves RMF steps 1–6, STIG compliance, ACAS, SCCA, and collaboration across Azure Government systems, CN/ZTA tools, and ongoing vulnerability management.

Candidates should have a Bachelor’s degree, 2–4 years cloud engineering RMF experience, DoD clearance

Qualifications

• Minimum education is a bachelor's degree in CS or a related field.
• 2–4 years of cloud engineering experience with RMF activities and ATO deadlines.
• Experience with SCAP scanning tools and Navy eVALUATE.
• Strong Azure administration and cloud architecture knowledge.
• Familiarity with CI/CD and DevSecOps toolchains.

Responsibilities

• Provide RMF lifecycle and compliance oversight for steps 1–6 across Azure Government and MLZ environments.
• Maintain ATO status through monitoring, vulnerability management and STIG compliance.
• Schedule checkpoints, deliver status reports and perform QA reviews.
• Support DoD SCCA/ACAS results and update POA&M entries.
• Configure and sustain RMF packages and future CN/ZTA tools in Azure Government and Commercial.
• Ensure adherence to DoD SRG and NIST SP 800-53 controls.

Skills

SCAP tools

Navy eVALUATE

Azure admin

CI/CD

DevSecOps

Education

Bachelor's degree in Computer Science or related field

Tools

ACAS

SCCA

STIG

Job description

***Position is in Ventura, CA or Remote***

Job Summary

The Cybersecurity Specialist 4 provides security and compliance oversight for the Risk Management Framework (RMF) Steps 1–6. This role ensures the integrity of current legacy and future security stacks through continuous monitoring, vulnerability management, and enforcement of DISA STIG compliance. You will act as a key technical resource for ensuring that Department of Navy CSM packages meet Authorization to Operate (ATO) deadlines while transitioning toward Zero Trust Architecture (ZTA).

As with any position, additional expectations exist. Some of these include, but are not limited to, adhering to normal working hours, meeting deadlines, following company policies as outlined by the Employee Handbook, communicating regularly with assigned supervisor(s), staying focused on the assigned tasks, and completing other tasks as assigned.

Responsibilities: RMF Lifecycle & Compliance Management

• Provide ongoing security support for the legacy SCCA stack and future ZTA Mission Landing Zone (MLZ) stacks in Azure Government across all RMF steps (1–6)
• Perform RMF activities to support CSM Packages, ensuring all requirements are met to achieve and maintain ATO status
• Schedule package checkpoints, deliver status reports, and perform quality assurance reviews
• Maintain and report the system’s Authorization and Assessment (A&A) status and related security events
• Assist in identifying the security control baseline set and any applicable overlays
• Manage Plan of Action and Milestone (POA&M) entries to ensure vulnerabilities are properly tracked, mitigated, and resolved

Technical Security Operations

• Support the implementation and maintenance of the SCCA, including routine patching and ensuring Secure Technical Implementation Guide (STIG) compliance
• Continuously monitor applications by assessing security control quality against requirements defined in the System Level Continuous Monitoring (SLCM) strategy
• Utilize Assured Compliance Assessment Solution (ACAS) results to update system POA&Ms
• Maintain Hardware and Software assessment sheets annually or upon environment changes
• Ensure strict adherence to the DoD SCCA Functional Requirements (v2.9) and the latest DoD Cloud Computing Security Requirements Guide (CC SRG)

Package & Tool Sustainment

• Provide compliance support for RMF packages
• Manage, configure, and sustain future CN/ZTA MLZ security tools in Azure Government and Commercial

Basic Qualifications

Education: Bachelor’s degree in Computer Science or a related field

Experience: 2–4 years of cloud engineering experience with specific expertise in RMF activities and ATO deadlines

Technical Skills

• Proficiency with Security Content Automation Protocol (SCAP) scanning tools and Navy eVALUATE
• Expertise in Azure administration and cloud architecture
• Experience with CI/CD and DevSecOps toolchains

Security Clearance

Security Clearance: U.S. Citizenship and the ability to obtain a DoD Top Secret clearance

Certification

Security+ certification

Preferred Qualifications

• Active DoD Top Secret clearance
• Certification: Active Security+ certification
• Cloud-specific certifications (e.g., Microsoft Certified: Azure Associate)
• Proven experience implementing DISA STIG configurations and supporting compliance for DoD SRG and NIST SP 800-53 security controls

Company Summary

Join the VSolvit team! Founded in 2006, VSolvit (pronounced "We.Solve.it") is a technology enabled solutions provider that specializes in AI/ML, cybersecurity, cloud computing, geographic information systems (GIS), business intelligence (BI) systems, data warehousing, engineering services, and custom database and application development. VSolvit is an award winning CA MBE, WBE, and CMMI Level 3 certified company. We offer a customizable benefits program that best meets the needs of our employees. Offering may include: medical, dental, and vision insurance; life insurance; long and short-term disability and other insurance products; Health Savings Account; Flexible Spending Account; 401(k) Retirement Plan options; Tuition Reimbursement; and assorted voluntary benefits. Our goal is to grow together and enjoy the work we do as a team.

VSolvit LLC is an Equal Opportunity/Affirmative Action employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status.