Risk Management Framework (RFM) Cyber Security Ops

Apogee Engineering, LLC; Westphalia (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

Apogee is seeking a qualified RMF Support - Cyber Security Ops professional to provide RMF/ATO support for the EACN program at Scott Air Force Base in Belleville, IL. The role requires DoD/federal RMF experience, a current IAM Level II certification, and the ability to work with ISSMs, SCAs, and program leadership to maintain ATO and security compliance.

On-site, full-time position with potential travel; contingent upon contract award.

Qualifications

• 4–6 years of experience in cybersecurity, information assurance, or RMF/ATO support within a DoD or federal environment.
• DoD 8570/8140-compliant certification at IAM Level II or higher required at hire or within grace period.
• Hands-on RMF process knowledge and NIST SP 800-37/800-53 familiarity.
• Experience with eMASS and development/maintenance of ATO artifacts.

Responsibilities

• Support RMF documentation and artifacts throughout the system authorization lifecycle (Categorization, Selection, Implementation, Assessment, Authorization, Continuous Monitoring).
• Track and support POA&M resolutions and vulnerability remediation efforts.
• Support continuous monitoring activities and periodic reauthorization requirements to maintain ATO status.
• Prepare briefings and reports on RMF status, risks, and compliance posture for leadership.

Skills

RMF/ATO support

Cybersecurity

Education

BA/BS in Cybersecurity, Information Systems, IT, CS

Master's Degree (preferred)

Tools

eMASS

ITIPS

DAFI 17-110

Job description

Overview

Apogee has an exciting new opportunity for an RMF Support -Cyber Security Ops to provide support for the Executive Airlift Communications Network (EACN) support task order, which provides Command, Control, Communications (C3) services for multiple critical U.S. Government missions via multiple Air to Global Information Grid (GIG) Gateways (A2G2’s) supported by a Systems Integration Lab (SIL).

This is a full-time position located on-site at Scott Air Force Base (SAFB), in Belleville, IL.

*** This position is contingent upon contract award.***

Responsibilities

• Support the EACN Program Manager (PM) by managing the Information Technology Investment Portfolio Suite (ITIPS) record for the EACN IT investment in accordance with Air Force Instruction (DAFI) 17-110, Information Technology Portfolio Management and Capital Planning and Investment Control.
• Coordinate with the EACN Information System Security Manager (ISSM), Air Force Enterprise Security Control Assessor Representative (SCAR), and Security Control Assessor (SCA) to initiate, develop, and maintain required artifacts using the Enterprise Mission Assurance Support Service (eMASS) in support of EACN's Authority to Operate (ATO).
• Provide support to the EACN PM, Government Engineers, Contracting Officer's Representative (COR), ISSM, Information System Security Officer (ISSO), and Cybersecurity Control Manager (CCM) for all EACN RMF-related matters, including cybersecurity investigations, inquiries, compliance activities, meetings, and authorizations.
• Develop, review, and maintain RMF documentation and artifacts throughout the system authorization lifecycle (Categorization, Selection, Implementation, Assessment, Authorization, and Continuous Monitoring).
• Track and support resolution of Plans of Action and Milestones (POA&Ms) and vulnerability remediation efforts.
• Support continuous monitoring activities and periodic reauthorization requirements to maintain system ATO status.
• Prepare briefings, reports, and documentation summarizing RMF status, risks, and compliance posture for program and government leadership.
• Assist in identifying automation opportunities to streamline RMF documentation, reporting, and compliance tracking processes.

Qualifications

Minimum Experience:

Citizenship: Must be a US citizenClearance:Must have and be able to maintain a TS/SCI level clearance

Education:BA/BS -Cybersecurity, Information Systems, Information Technology, Computer Science, or a related technical fieldB

Years of Experience: 4–6 years of experience in cybersecurity, information assurance, or RMF/ATO support within a DoD or federal environment.

Technical Experience:

• Current DoD 8570/8140-compliant certification at the IAM Level II or higher (e.g., Security+ CE, CAP, CASP+) required at time of hire or within a specified grace period.
• Demonstrated hands-on experience with the Risk Management Framework (RMF) process and NIST SP 800-37/800-53 controls.
• Working knowledge of the Enterprise Mission Assurance Support Service (eMASS) and development/maintenance of ATO artifacts.
• Familiarity with Air Force Instruction (DAFI) 17-110 and IT portfolio/investment management processes (ITIPS).
• Ability to work independently and collaboratively with government PMs, ISSMs, ISSOs, SCAs, and other stakeholders in a fast-paced, mission-critical environment.

Preferred Qualifications:

Education:Master's DegreeYears of Experience: :10 years of experience in cybersecurity, information assurance, or RMF/ATO support within a DoD or federal environment.

Additional Information:Location: Jt Scott Air Force Base (SAFB), in Belleville, IL.On-site: Full-time on-site positionTravel:10% travel may be required

*** This position is contingent upon contract award.***