IT Certified Professional - Senior

UpSlope, Inc.; Aberdeen (MD); On-site; USD 90,000 - 140,000; Full time

Job summary

UpSlope, Inc. is seeking an on-site cybersecurity engineer to provide RMF support for Aberdeen Test Center information systems, including ATC LAN, Logically Isolated Network, and Secure Test Environment.

The role focuses on establishing and sustaining ATOs and continuing authorization. The ideal candidate has five years RMF experience, holds an Active Secret clearance, and is familiar with Windows, Linux, and Apple environments, including SIPRNet access.

Qualifications

• Five years supporting RMF lifecycle reporting and software/hardware reconciliation.
• Active Secret clearance with Type 3 investigation at bid submission and SIPRNet access.
• Experience managing networks across Windows, Linux, and Apple platforms; including Secret environments.

Responsibilities

• Support RMF system categorization, boundary identification, security-control selection, implementation, and assessment.
• Prepare and maintain RMF lifecycle documentation for ATO decisions and ongoing authorization.
• Assist during SCA visits, reviews, validation, and remediation responses.
• Perform continuous security-control monitoring, POA&M maintenance, and IAVM activities.
• Review changes to baselines, assess cybersecurity impacts and interoperability, and support configuration management.

Skills

RMF lifecycle

Security clearance

Windows/Linux/Apple networks

DoD 8140.01/8570.01-M requirements

Job description

Position Summary

Provide on-site cybersecurity engineering and DoD Risk Management Framework (RMF) support for Aberdeen Test Center (ATC) information systems, including the ATC LAN, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. Help establish, sustain, and continuously monitor system authorizations to operate (ATOs).

Primary Responsibilities

• Support RMF system categorization, boundary identification, security-control selection, implementation, and assessment.
• Prepare, update, and maintain RMF lifecycle documentation and supporting evidence for ATO decisions and ongoing authorization.
• Support Security Control Assessor (SCA) visits, reviews, validation activities, and remediation responses.
• Perform continuous security-control monitoring, Plan of Action and Milestones (POA&M) maintenance, and information assurance vulnerability management (IAVM) activities.
• Review changes to hardware/software baselines, assess cybersecurity impacts and interoperability, and support configuration-management and technical control boards.
• Analyze defect/incident reports; validate tracking records and reconcile relevant software and hardware information.
• Support software baseline requirements, system architecture, emerging technology evaluations, and capability migrations.

Mandatory Qualifications

• CASP+ (now called CompTIA SecurityX) or an equivalent certification accepted under the solicitation.
• At least five years supporting RMF lifecycle reporting and software/hardware reconciliation.
• Experience managing networks across Windows, Linux, and Apple platforms and in unclassified/classified (including Secret) environments.
• Active Secret personnel security clearance, with favorably adjudicated Type 3 investigation, at bid submission; ability to maintain assigned SIPRNet access.
• Meet applicable DoDD 8140.01, DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2 baseline certification requirements at award.