Cybersecurity Engineer / RMF Specialist

Cleared2Hire | The GovTech Talent Platform; Columbus (OH); On-site; USD 85,000 - 115,000; Full time

Job summary

Cleared2Hire | The GovTech Talent Platform in Columbus, OH seeks an RMF-focused cybersecurity professional to support a federal customer’s Authorization to Operate (ATO) requirements for critical building automation and facility control systems.

You will document, assess, and strengthen cybersecurity controls in operational environments, collaborating with onsite teams, government stakeholders, and engineers to produce audit-ready security documentation.

Qualifications

• Experience with RMF in federal environments and security control documentation.
• Ability to conduct vulnerability assessments and track remediation.
• Familiarity with STIGs, NIST 800-53 controls, and FIPS 199/200.
• Strong technical writing skills for audit-ready documentation.

Responsibilities

• Develop and maintain RMF documentation including system diagrams and POA&Ms.
• Collect information from system owners and engineering teams.
• Support risk assessments and system categorization activities.
• Review vulnerability scans (ACAS/SCAP) and track remediation.
• Assist with STIG compliance and security control assessments.
• Maintain inventories of hardware, software, and documentation.
• Coordinate with cybersecurity teams and program stakeholders.

Skills

NIST 800-53 / FIPS 199/200

Vulnerability assessments

STIG compliance

Security control documentation

Technical writing

Security+ CE or DoD 8140 IAM Level I

Role-based computing environment cert.

Secret clearance

Tools

eMASS

Job description

Support a federal customer's cybersecurity compliance and Authority to Operate (ATO) requirements for critical building automation, utilities, and facility control systems.

This position focuses on documenting, assessing, and strengthening cybersecurity controls in operational environments. You'll work with an onsite cybersecurity team, government stakeholders, and engineering personnel to develop audit-ready security documentation.

What you’ll do

• Develop and maintain RMF documentation, including system diagrams, security categorization, control implementation documentation, and POA&Ms.
• Collect technical information from system owners and engineering teams.
• Support risk assessments and system categorization activities.
• Review ACAS and SCAP vulnerability scans and track remediation.
• Assist with STIG compliance and security control assessments.
• Maintain hardware, software, and documentation inventories.
• Coordinate with cybersecurity teams and program stakeholders.

Required skills

• NIST 800-53 and FIPS 199/200
• Vulnerability assessments
• STIG compliance
• Security control documentation
• Technical writing

Preferred experience

• eMASS
• OT, IC
• FedRAMP
• ATO/ATC programs

Required certifications

• Security+ CE or equivalent DoD 8140.03 IAM Level I
• Role-based computing environment certification within 180 days of hire

Clearance

• Secret