IA/Cyber Security Engineer at Altagrove LLC Norfolk, VA

Downtown Boulder Partnership; Norfolk (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

Altagrove LLC in Norfolk, VA seeks an IA/Cyber Security Engineer to support Air Force IT and network projects, ensuring DoD compliance and robust cyber defenses.

You will drive RMF processes, craft security strategies, and lead incident response while coordinating with cross‑functional teams and government stakeholders to maintain secure architectures.

Qualifications

• 7–10 years in cybersecurity with 3–5 years on DoD projects.
• Strong knowledge of RMF, NIST 800-53, DISA STIGs, and DoD cybersecurity policies.
• Experience with SIEM, vulnerability management, firewalls, IDS/IPS, and endpoint protection.

Responsibilities

• Lead RMF/ATO documentation and artifacts.
• Oversee RMF processes from system categorization to ATO approvals.
• Develop and maintain cybersecurity strategies for DoD IT projects.
• Coordinate with government stakeholders and project teams on cyber matters.
• Perform regular security assessments, audits, and scans to ensure compliance.
• Lead incident response, containment, and remediation efforts.

Skills

RMF expertise

NIST 800-53

DoD policies

JADC2 knowledge

Agile methods

Education

CISSP

CISM

CISA

Tools

SIEM

Vulnerability mgmt

Firewalls

IDS/IPS

Endpoint protection

Job description

Overview

IA/Cyber Security Engineer position at Altagrove LLC in Norfolk, VA.

Responsibilities

• Support all cybersecurity activities for Air Force IT and network projects, ensuring compliance with DoD security requirements and standards.
• Oversee the implementation of Risk Management Framework (RMF) processes, from system categorization through Authority to Operate (ATO) approvals.
• Develop, implement, and maintain cybersecurity strategies and plans to protect systems, networks, and data from unauthorized access and cyber threats.
• Identify risks, vulnerabilities, and potential threats to systems and develop risk mitigation strategies.
• Conduct regular security assessments, vulnerability scans, and audits to ensure systems remain secure and compliant.
• Collaborate with cross-functional teams, including IT, engineering, and project management, to implement and maintain secure architectures and configurations.
• Serve as the primary liaison between project teams and government stakeholders for cybersecurity matters.
• Develop and deliver security documentation, briefings, and reports to leadership and stakeholders.
• Lead incident response efforts, including investigation, containment, and remediation of security incidents.
• Stay up to date on the latest cybersecurity trends, threats, and technologies to recommend improvements to current security practices.
• Lead and complete RMF and Authority to Operate (ATO) documentation and artifacts.
• Work with engineers to drive completion and compliance of security controls and STIGs.
• Conduct cybersecurity and network scans and collaborate with the engineering team to resolve issues.
• Manage and track POA&Ms and coordinate with engineering teams to address and resolve them.
• Maintain current knowledge and understanding of security and networking best practices in the industry and DoD to provide optimal solutions and system protection.
• Lead projects and function effectively in a highly dynamic environment.
• Support all aspects of a Program Information Assurance (IA) process tailored to include cybersecurity, engineering, Test & Evaluation (T&E), and/or Security Control Assessor (SCA) under a Certification & Accreditation (C&A) and/or Assessment & Authorization (A&A) process.

Qualifications

• Minimum of 7-10 years of experience in cybersecurity, with at least 3-5 years supporting DoD projects.
• Strong knowledge of RMF, NIST 800-53, DISA STIGs, and DoD cybersecurity policies.
• Experience with cybersecurity tools and technologies such as SIEM, vulnerability management, firewalls, IDS/IPS, and endpoint protection.
• Familiarity with cloud security and cross-domain solutions.
• Excellent problem-solving and analytical skills.
• Ability to manage multiple projects and priorities in a fast-paced environment.
• Proficiency in security assessment tools and risk management frameworks.
• Experience with Joint All-Domain Command and Control (JADC2) initiatives and other defense communication networks.
• Knowledge of secure cloud architectures and cybersecurity strategies for hybrid environments.
• Familiarity with Agile project management methodologies.
• Knowledge of RMF policy, procedures, and artifacts.
• Working knowledge of DoD network policies and regulations related to network design and configuration.
• Firm understanding of network security concepts and best practices, including firewall administration (e.g., McAfee Sidewinder, Cisco ASA, Juniper products).
• Practical knowledge of networking systems such as LAN, firewalls, routers, and printers.
• Understanding of network services and protocols such as TCP/IP, OSPF, and EIGRP.
• Ability to analyze and evaluate networks, identify issues, and provide solutions to ensure network efficiency.
• Ability to clearly communicate and engage with government and partner Cyber and Information Assurance stakeholders.
• CISSP, CISM, or CISA required. CEH, CompTIA Security+, or other relevant certifications are a plus.
• Active Secret clearance required, with eligibility for Top Secret/SCI.
• Self-motivated with the ability to work independently and in a highly dynamic team environment.
• Willingness to go the extra mile on behalf of customers, partners, and their missions.