Information Assurance Engineer III

IPSecure; Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

IPSecure is seeking an Information Assurance Engineer III to support RMF-based authorization and continuous monitoring across DoD and government environments. You will coordinate with ISSOs, system owners, and engineers to ensure compliance and readiness for assessments.

The role requires an active TS/SCI clearance and a Bachelor's in a related field, with hands-on experience in vulnerability management, eMASS, and ACAS workflows. On-site at JBSA Lackland is expected.

Qualifications

• Experience supporting RMF and system authorization packages.
• Experience with vulnerability management, ACAS results, and continuous monitoring.
• Experience coordinating cybersecurity activities with ISSOs, system owners, engineers, and stakeholders.
• Active TS/SCI clearance is required.

Responsibilities

• Lead and support RMF activities across the system authorization lifecycle.
• Maintain continuous authorization readiness for certification packages.
• Develop, review, and maintain cybersecurity evidence, supporting artifacts, and POA&M.
• Coordinate RMF activities with ISSOs, system owners, engineers, and government officials.
• Evaluate cybersecurity risks and provide evidence-based IA recommendations.
• Support authorization reviews, continuous monitoring, and compliance assessments.
• Ensure documentation reflects system architecture, environment, and security controls.
• Review configurations for DoD, Air Force, NIST, and DISA requirements.

Skills

RMF

Information Assurance

Cybersecurity governance

Continuous monitoring

Vulnerability management

DoD environment experience

Security assessment

Stakeholder coordination

Education

Bachelor's degree in Cybersecurity/Information Assurance/IT/CS/Engineering

Tools

eMASS

ACAS

DISA STIG Viewer

Job description

Position:Information Assurance Engineer III

Location: JBSA - Lackland, TX

Job Id:883

# of Openings:1

Information Assurance Engineer III – TS/SCI Clearance Required – JBSA Lackland - San Antonio, TX

Job Description

The Information Assurance Engineer III serves as acybersecurity and Risk Management Frameworkspecialist. The positionmaintainscontinuous authorization readiness, oversees cybersecurity compliance activities, manages authorization evidence, and provides technically supported Information Assurance recommendations to Government leadership, ISSOs, ISSMs, system owners, engineers, and operational stakeholders.

The Information AssuranceEngineersupportssecure and compliant operations across enterprise information systems, cloud-hosted environments, specialized mission networks, and multiple classified and unclassified enclaves. The position ensures cybersecurity risks, vulnerabilities, configuration weaknesses, and compliance deficiencies areidentified, documented, communicated, and tracked through closure.

Job Responsibilities

• Lead and support Risk Management Framework activities throughout the system authorization lifecycle.
• Maintain continuousauthorizationreadiness across network certification and accreditation packages.
• Develop, review, andmaintaincybersecurityauthorizationdocumentation, supporting evidence, and compliance artifacts.
• Coordinate RMF activities with ISSOs, ISSMs, system owners, engineers, administrators, and Government authorizing officials.
• Evaluate cybersecurity risks and provide evidence-based Information Assurance recommendations.
• Support authorization reviews, continuous monitoring activities, and recurring compliance assessments.
• Ensure cybersecurity documentation accurately reflects the system architecture, operational environment, interconnections, and implemented security controls.
• Perform continuous cybersecurity compliance checks and remediation tracking.
• Integrate weekly vulnerability scan results into continuous monitoring and remediation processes.
• Incorporate quarterly DISA Security Technical ImplementationGuideupdates into system compliance activities.
• Assesssecurity-controlimplementation andidentifycompliance gaps requiring corrective action.
• Monitor remediation progress andvalidateclosure ofidentifieddeficiencies.
• Maintain cybersecurity posture information for Government reviews and leadership reporting.
• Support compliance standardization across all DAFIN-SOC Operating Locations.
• Analyze vulnerabilityscanresults and assess technical and mission risk.
• Develop,maintain, and update Plans of Action and Milestones.
• Coordinate vulnerability remediation with infrastructure, systems administration, network, virtualization, and cybersecurity operations teams.
• Validate corrective actions andmaintainevidencedemonstratingsuccessful remediation.
• Identifyoverdue or high-risk findings and elevate issues toappropriate Governmentstakeholders.
• Support risk acceptance, mitigation, transfer, and closure recommendations based on documented evidence.
• Review system configurations for compliance with applicable DoD, Air Force, NIST, and DISA requirements.
• Support implementation and maintenance of DISA STIG-aligned security baselines.
• Evaluate configuration changes for cybersecurity impact.
• Review hardware, software, firmware, cloud, and virtual infrastructure configurations.
• Support inventory,supply-chainrisk, andsecure-configurationmanagement activities.
• Coordinate with configuration management personnel to ensure approved baselines and security documentation remain synchronized.
• Review proposed system changes and provide cybersecurity recommendations before implementation.
• Manage cybersecurityevidencerepositories and perform quality assurance reviews.
• Ensure evidence isaccurate, current, traceable, and sufficient to support authorization and audit activities.
• Maintain interconnection agreements, contingency planning documentation, ACAS reporting artifacts, and related cybersecurity records.
• Support inspections, assessments, audits, and Government compliance reviews.
• Develop structured compliance summaries, risk reports, andcorrective-actionrecommendations.
• Strengthenevidencegovernance, remediation workflows, and closure validation.
• Maintain documentation necessary todemonstratecontinuing compliance and operational authorization.
• Provideadvanced Information Assurance guidance to program leadership and technical teams.
• Interpret cybersecurity policies, directives, instructions, and technical implementation requirements.
• Develop andmaintaincybersecurity procedures, checklists, templates, and governance documentation.
• Support cybersecurity metrics, dashboards, risk-trend reporting, and recurring performance reviews.
• Promote consistent cybersecurity practices across operating locations and mission environments.
• Identifyopportunities to improve compliance processes,evidencequality, and remediation efficiency.
• Support modernization of cybersecurity reporting and continuous monitoring workflows.
• Collaborate with network engineers, Windows and UNIX engineers, virtualization engineers, systems administrators, configuration managers, and security operations personnel.
• Review system architecture, interfaces, data flows, accounts, and dependencies for cybersecurity impact.
• Support incident, outage, maintenance, and technology-refresh activities when cybersecurity oversight isrequired.
• Participate in change management and technical review processes.
• Ensure cybersecurity requirements are incorporated into system sustainment, modernization, automation, and recovery activities.
• Supportprivileged-accessreviews and cybersecurity audit requests.
• Develop and maintain RMF authorization documentation, security control implementation statements, Plans of Action and Milestones, continuous monitoring documentation, security assessment evidence, ACAS and vulnerability-management reports, interconnection documentation, contingency and recovery artifacts, risk assessments, compliance summaries, standard operating procedures, and checklists.
• Prepare status updates, risk summaries, technical recommendations, and leadership briefings.
• Document decisions, approvals, remediation actions, validation results, and closure evidence.

Basic Qualifications

Security Clearance: Active TS/SCI

Education: Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, ora relateddiscipline is preferred. Equivalent relevant education, training, and experience may be considered based on contract and company requirements.

Certification: CISSP-ISSMP, GSLC or Legacy CCSP or CISSP

Experience:

• Demonstrated advanced-level experience supporting Information Assurance, cybersecurity governance, RMF, or information system security management.
• Experience supporting DoD, Department of the Air Force, Federal Government, or similarly regulated enterprise environments.
• Experience preparing andmaintainingsystem authorization packages and cybersecurity evidence.
• Experience with vulnerability management, POA&M administration, DISA STIGs, ACAS results, and continuous monitoring.
• Experience coordinating cybersecurity activities with ISSOs, ISSMs, system owners, engineers, and operational stakeholders.
• Ability to assess technical cybersecurity findings and communicate their mission and operational impact.

Preferred Qualifications

• Experience leading RMF authorization and continuous-monitoring activities for Department of the Air Force DCO systems, DAFIN-SOC environments, or comparable classified DoD systems.
• Advanced proficiency with eMASS, ACAS/Tenable Security Center, DISA STIG Viewer, Enterprise Mission Assurance Support Service workflows, and cybersecurity evidence repositories.
• Demonstrated experience developing and maintaining authorization packages, security-control implementation statements, POA&Ms, risk assessments, interconnection agreements, contingency plans, and audit-ready evidence.
• Expertise analyzing vulnerability scan results, assessing technical and mission risk, coordinating remediation across multidisciplinary engineering teams, and validating findings through evidence-based closure.
• Experience implementing NIST SP 800-53, DoDI 8510.01, Air Force cybersecurity directives, DISA STIGs, continuous authorization, and security requirements across classified, cloud, virtualized, and multi-enclave environments.

• Medical, Dental, Vision, Unlimited Vacation, Sick Leave, Paid Federal Holidays, Education and Certification Reimbursement Program, 401(k) retirement plan with safe harbor employer match after 3 months, Prepaid Legal Plan and Identity Protection Plan available, Accident Insurance, Critical Illness Insurance, and Hospital Indemnity Insurance available.

EEOC Statement

IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

IPSecure is an Equal Opportunity Aff… EOE, Minorities, Females, Vet, Disabled, Sexual Orientation, Gender Identity or any other protected class. All qualified job seekers are encouraged to apply. IPSecure is committed to America's veterans by providing opportunities for them to continue contributing after service to our nation. We also work to provide reasonable accommodations to individuals with disabilities.
EEO Is The Law

Disability Accessibility Accommodation

If you have a disability and require assistance with our online application process, please tell us how we can help.

Note:

Pay Transparency - The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.