Cybersecurity Engineer / RMF Specialist - DLA

Nemean Solutions, LLC; Columbus (OH); On-site; USD 110,000 - 140,000; Full time

Job summary

Nemean Solutions, LLC in the United States is seeking a Cybersecurity Engineer / RMF Specialist to document, assess, and strengthen security posture of building control systems for a federal customer. The role emphasizes creating defensible artifacts and maintaining an Authority to Operate (ATO) through accurate security documentation and traceable POA&Ms.

The candidate will review vulnerability findings, coordinate with system owners and a remote cybersecurity team, and contribute to monthly

Qualifications

• Bachelor's degree or equivalent experience considered.
• DoD 8140 IAM Level I certification required or in progress.
• Experience producing security artifacts reviewed by government officials.
• Hands-on RMF process support in federal or DoD environments.
• Familiarity with NIST SP 800-53/82 and related controls.
• Ability to translate technical input into defensible security docs.

Responsibilities

• Develop and maintain RMF documentation and security artifacts.
• Collect and organize technical information into audit-ready deliverables.
• Support system categorization and risk assessment activities.
• Review vulnerability scans, document findings, and track POA&Ms.
• Assist with STIGs, security control checklists, and compliance status.
• Maintain inventories of in-scope hardware/software/docs.
• Coordinate with remote cybersecurity team and stakeholders.
• Contribute to monthly reporting and customer deliverables.
• Support transition activities and documentation handover.

Skills

RMF documentation

Security documentation

Vulnerability assessment

Stakeholder coordination

Federal contracting

Risk management

Education

Bachelor’s degree preferred

DoD 8140 IAM Level I

Security+ CE

Tools

ACAS

STIG

eMASS

CNSSI 1253

NIST SP 800-53

NIST SP 800-82

Job description

Description

Nemean Solutions, headquartered in Sierra Vista, AZ, is a certified SBA 8(a) Native Hawaiian Organization (NHO) and veteran-operated company providing advanced Military Intelligence, Enterprise and Cloud IT services, Cybersecurity, Special Operations Forces (SOF) Exercise and Training, and niche Program Support and Professional Services to Federal and State Agencies supporting the US Government Defense, Intelligence and Aerospace sectors.

Description

Nemean Solutions, headquartered in Sierra Vista, AZ, is a certified SBA 8(a) Native Hawaiian Organization (NHO) and veteran-operated company providing advanced Military Intelligence, Enterprise and Cloud IT services, Cybersecurity, Special Operations Forces (SOF) Exercise and Training, and niche Program Support and Professional Services to Federal and State Agencies supporting the US Government Defense, Intelligence and Aerospace sectors.

Job Overview

The Cybersecurity Engineer / Risk Management Framework (RMF) Specialist supports a federal customer in documenting, assessing, and strengthening the cybersecurity posture of building and facility control systems, including building automation, utilities, and metering. The role supports the customer in achieving and maintaining an Authority to Operate (ATO) through accurate, defensible security documentation and assessment activities.

Essential Duties & Responsibilities

• Develop and maintain RMF documentation and security artifacts, including system diagrams, security categorization documents, control implementation narratives, and plans of action and milestones (POA&Ms).
• Collect, consolidate, validate, and organize technical information from system owners, engineers, and operations personnel into audit-ready deliverables.
• Support system categorization and risk assessment activities by preparing documentation and tracking stakeholder inputs.
• Review vulnerability scan results, document findings, develop remediation plans and POA&Ms, and track actions through closure.
• Assist with Security Technical Implementation Guide (STIG) and security control checklists, including compliance status and exceptions.
• Maintain accurate inventories of in-scope hardware, software, and supporting documentation.
• Coordinate with the Government’s remote cybersecurity team, program managers, security officers, engineers, and vendors to ensure artifacts meet enterprise expectations.
• Contribute to monthly reporting and recurring customer deliverables within required deadlines and formats.
• Support phase-in and transition activities, including obtaining and validating documentation from the outgoing team.

Requirements

Minimum Requirements/Education:

• Bachelor’s degree preferred but is not required; equivalent experience, technical training, military service, or relevant industry certifications will be considered.
• Must meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE.
• Role-based computing environment certification must be obtained before privileged access, within 180 days of the first day of employment.
• Hands‑on experience supporting the RMF process in a federal, DoD, or similarly complex environment.
• Experience producing security documentation and artifacts reviewed by a Government ISSM, auditor, or authorizing official.
• Working knowledge of FIPS 199/200, NIST SP 800-53, NIST SP 800-82, and CNSSI 1253.
• Familiarity with DoD vulnerability scanning and compliance tools (e.g., ACAS, SCAP) and ability to interpret their output.
• Ability to translate technical input into clear, defensible security documentation and coordinate with diverse stakeholders.

Preferred Skills

• Experience uploading and maintaining artifacts in eMASS or a similar RMF package management system.
• Experience with OT, IC..., ???
• Knowledge of the Purdue Enterprise Reference Architecture.
• Experience supporting ATO or Authority to Connect (ATC) efforts from initiation through completion.
• Familiarity with FedRAMP and Zero Trust principles.
• Experience with privacy documentation (PIA/PRiLA) or contingency planning artifacts.
• Prior Defense Logistics Agency (DLA) customer experience.

Security Requirement

• Must be a US Citizen with the ability to obtain & maintain a Secret security clearance.