Cybersecurity Engineer I - RMF/ATO Specialist

Client Solution Architects; Arlington (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Client Solution Architects is seeking an Engineer I to support onsite in Arlington, VA, delivering critical RMF and A&A support for Navy information systems. You will manage eMASS workflows, apply STIG/SRG controls, and coordinate with government leads to maintain a defensible cybersecurity posture.

The role emphasizes vulnerability management, documentation, and cross-functional collaboration to prepare for inspections and audits in a defense contracting environment.

Qualifications

• Active Secret Clearance required and maintained.
• Five years of experience in RMF, DoD/DON cybersecurity or system integration.
• Experience with enterprise architecture, data integration, and cybersecurity policy compliance.

Responsibilities

• Prepare and maintain A&A packages to achieve Authority to Operate (ATO).
• Manage RMF workflows and track status through NAO, SCA, and Validator queues.
• Conduct vulnerability management: scanning, remediation tracking, and reporting.
• Apply DISA STIGs/SRGs to harden OS, apps, and devices per DISA standards.
• Provide cybersecurity engineering support for secure system architectures.
• Support system and data integration for secure connectivity.
• Support audits, inspections, CCRI, CORA, CSI assessments.
• Assist incident response and electronic spillage management with government leads.
• Maintain configuration documentation and architectural artifacts.

Skills

RMF

A&A Packaging

Vulnerability Management

Security Testing

Documentation

Education

DoD 8140 aligned certifications

CASP+ / Security+ / SSCP (or equivalent)

Tools

eMASS

STIG Manager

Evaluate-STIG

Navy RMF

Job description

Client Solution Architects is seeking an Engineer I to support onsite in Arlington, VA, delivering critical RMF and A&A support for Navy information systems. You will manage eMASS workflows, apply STIG/SRG controls, and coordinate with government leads to maintain a defensible cybersecurity posture.

The role emphasizes vulnerability management, documentation, and cross-functional collaboration to prepare for inspections and audits in a defense contracting environment.