DoD RMF Cybersecurity Engineer for Air Force

mcbrideconsulting; Oklahoma City (OK); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Life insurance

401(k)

Paid time off

Vision insurance

Professional development assistance

Referral program

Job summary

McBride Consulting is seeking a Cybersecurity Engineer to support the AFLCMC/ESG program at Tinker AFB in Oklahoma. The role focuses on RMF/A&A activities, security documentation, and implementing DoD cybersecurity policies to protect DoD systems and data.

The candidate will manage PKI, access controls, vulnerability remediation, and security training while collaborating with government and industry stakeholders in a fast-paced environment.

Qualifications

• Active Top Secret clearance required.
• US citizenship required.
• ABET-accredited engineering degree with 7+ years DoD experience.
• Security+ certification and DoD cloud security knowledge.
• Experience with RMF and A&A documentation.
• Strong communication skills.

Responsibilities

• Develop security documentation (SSMP, PPP, Security Risk Analyses, OPSEC plans).
• Support RMF A&A activities and DoD cybersecurity policies.
• Manage system access, PKI, and user accounts.
• Implement and track security updates and vulnerability remediation.
• Conduct risk assessments and develop security policies.
• Collaborate on system/network design to meet security requirements.
• Prepare RMF-related reviews and training.

Skills

RMF implementation

A&A processes

DoD cybersecurity

PKI management

STIG compliance

Cloud security (DoD)

CI/CD / DevSecOps

Technical communication

Education

ABET-accredited engineering degree

Bachelor’s degree in engineering

Tools

eMASS

Job description

McBride Consulting is seeking a Cybersecurity Engineer to support the AFLCMC/ESG program at Tinker AFB in Oklahoma. The role focuses on RMF/A&A activities, security documentation, and implementing DoD cybersecurity policies to protect DoD systems and data.

The candidate will manage PKI, access controls, vulnerability remediation, and security training while collaborating with government and industry stakeholders in a fast-paced environment.