Engineer I

Client Solution Architects; Arlington (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Client Solution Architects (CSA) is seeking an Engineer I to support onsite in the Arlington, VA area. You will execute RMF processes, prepare A&A packages, and manage eMASS workflows to sustain Authority to Operate for Navy systems.

Key duties include vulnerability management, applying DISA STIGs/SRGs, and providing cybersecurity engineering support for secure architectures and cross-domain integration.

Qualifications

• Active Secret Clearance required or ability to obtain it.
• 5+ years in RMF, cybersecurity, system integration, or data integration.
• Working knowledge of DoD/DON cybersecurity requirements and directives.

Responsibilities

• Execute RMF activities across system categorization, control selection, implementation, assessment and authorization.
• Prepare A&A packages to achieve and sustain ATO for Navy information systems.
• Manage RMF packages in eMASS and track status through NAO, SCA, and Validator queues.
• Conduct enterprise vulnerability management including scanning, remediation tracking and reporting.
• Apply DISA STIGs and SRGs to strengthen operating systems, apps, and network devices.
• Provide cybersecurity engineering support for secure system architectures.
• Support data and system integration for secure, interoperable networks.
• Ensure policy compliance and prepare documentation for inspections and audits.
• Support incident response and electronic spillage management with government leads.
• Maintain configuration docs and artifacts; collaborate with government and contractor teams.
• Develop DoD 8140-aligned cyber workforce tracking and dashboards.

Skills

RMF

A&A packages

eMASS

DISA STIGs

Vulnerability scanning

Network security

DoD requirements

CASP+

Security+

SSCP

Job description

Description

Client Solution Architects (CSA) is currently seeking an Engineer I to support onsite in the Arlington, VA area. For nearly 50 years, CSA has delivered integrated technology and operational support services to meet the defense and federal sector's most complex enterprise needs. Working from operations centers and shipyards to training sites and program offices, CSA deploys experienced teams, innovative tools and proven processes to advance federal missions. This position is contingent upon contract award. Onsite/Hybrid/Remote work schedules subject to change based on contract requirements.

Job Type

Full-time.

How Role Will Make An Impact

• Execute all phases of the Risk Management Framework (RMF) to support system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Prepare, review, and maintain Assessment and Authorization (A&A) packages to achieve and sustain Authority to Operate (ATO) for Navy information systems and networks.
• Manage RMF package workflows within the Enterprise Mission Assurance Support Service (eMASS), tracking package status through the Navy Authorizing Official (NAO), Security Control Assessor (SCA), and Validator review queues.
• Conduct enterprise vulnerability management activities, including scanning, analysis, remediation tracking, and reporting to reduce risk exposure across assigned systems.
• Apply Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) to harden operating systems, applications, and network devices in accordance with DISA standards.
• Provide cybersecurity engineering support for the design, integration, configuration, testing, and deployment of secure system architectures.
• Support system integration and data integration efforts to ensure secure, interoperable connectivity across enterprise environments.
• Enforce cybersecurity policy compliance and prepare supporting documentation for command inspections, audits, and reviews, including CCRI, CORA, and CSI assessments.
• Support incident response and electronic spillage management activities in coordination with government leads.
• Maintain accurate system configuration documentation, architectural artifacts, and control implementation records.
• Collaborate with government personnel and contractor teammates to advance audit readiness and sustain a defensible cybersecurity baseline.
• Develop and maintain Cyber Workforce (CWF) compliance tracking products aligned to DoD 8140 work roles, and support enterprise cybersecurity performance dashboards providing visibility into RMF, ATO, and POA&M status.

Requirements

• Clearance: Must possess and maintain an active Secret Clearance.
• Five years of experience in one or more of the following areas: Enterprise Architecture, Cybersecurity and Risk Management Framework (RMF), System Integration, Data Integration Environments.
• Demonstrated working knowledge of DoD and DON cybersecurity requirements, policies, and technical directives.

What Sets You Apart

• CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, Systems Security Certified Practitioner (SSCP), or an equivalent industry certification.
• DoD 8140 and Cyber Workforce (CWF)-aligned certifications appropriate to the assigned work role.
• Working proficiency with the Risk Management Framework (RMF) and the associated ATO lifecycle.
• Familiarity with eMASS for package development, workflow management, and status tracking.
• Experience applying DISA STIGs and SRGs, and using automated compliance tools such as STIG Manager and Evaluate‑STIG.
• Knowledge of enterprise vulnerability scanning tools and remediation methodologies.
• Understanding of secure network and system architecture, including integration across cloud and DoD-owned environments.
• Strong analytical, documentation, and communication skills suitable for a formal defense contracting setting.
• Ability to work both independently and within cross‑functional teams to meet mission‑critical deadlines.

Physical Requirements

• Sit for extended periods of time and work at a computer workstation.
• Use hands and fingers to operate keyboards, mice, and other input devices.
• Communicate effectively, both verbally and in writing.
• Specific vision abilities required may include close vision, distance vision, depth perception, and the ability to adjust.
• Stand, walk, bend, or reach; access equipment located in data centers, offices, or under desks.
• Lift and/or move equipment weighing up to 25 pounds.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions, in accordance with the Americans with Disabilities Act (ADA).