Federal RMF & ATO Cyber Engineer for OT Systems

Cleared2Hire | The GovTech Talent Platform; Columbus (OH); On-site; USD 85,000 - 115,000; Full time

Job summary

Cleared2Hire | The GovTech Talent Platform in Columbus, OH seeks an RMF-focused cybersecurity professional to support a federal customer’s Authorization to Operate (ATO) requirements for critical building automation and facility control systems.

You will document, assess, and strengthen cybersecurity controls in operational environments, collaborating with onsite teams, government stakeholders, and engineers to produce audit-ready security documentation.

Qualifications

• Experience with RMF in federal environments and security control documentation.
• Ability to conduct vulnerability assessments and track remediation.
• Familiarity with STIGs, NIST 800-53 controls, and FIPS 199/200.
• Strong technical writing skills for audit-ready documentation.

Responsibilities

• Develop and maintain RMF documentation including system diagrams and POA&Ms.
• Collect information from system owners and engineering teams.
• Support risk assessments and system categorization activities.
• Review vulnerability scans (ACAS/SCAP) and track remediation.
• Assist with STIG compliance and security control assessments.
• Maintain inventories of hardware, software, and documentation.
• Coordinate with cybersecurity teams and program stakeholders.

Skills

NIST 800-53 / FIPS 199/200

Vulnerability assessments

STIG compliance

Security control documentation

Technical writing

Security+ CE or DoD 8140 IAM Level I

Role-based computing environment cert.

Secret clearance

Tools

eMASS

Job description

Cleared2Hire | The GovTech Talent Platform in Columbus, OH seeks an RMF-focused cybersecurity professional to support a federal customer’s Authorization to Operate (ATO) requirements for critical building automation and facility control systems.

You will document, assess, and strengthen cybersecurity controls in operational environments, collaborating with onsite teams, government stakeholders, and engineers to produce audit-ready security documentation.