RMF A&A Cybersecurity Engineer for DoD Cloud

KIHOMAC; Lincoln (MA); On-site; USD 125,000 - 148,000; Full time

Benefits offered by this job

Health Care Plan (Medical, Dental &amp

Retirement Plan (401k, IRA)

Life Insurance (Basic, Voluntary &

Paid Time Off

Disability Insurance

Training & Development

Wellness Resources

Job summary

KIHOMAC seeks an experienced security professional to support RMF/A&A activities and develop defense-grade security documentation for DoD systems, including guidance for cloud infrastructure and DevSecOps practices.

The role emphasizes cross-functional collaboration, evaluation of RMF controls, PKI and access management, and compliance with DoD cybersecurity policies throughout the program life cycle.

Qualifications

• Bachelor's Degree preferred.
• Security +
• 7+ years of experience in a related field.
• 3+ years working in the DoD sector.
• Understanding of cybersecurity in DoD cloud infrastructure.
• Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps.
• Experience with systems analysis and eMASS.
• Strong ability to communicate technical topics effectively in both written and verbal forms.
• STIG compliance.
• Risk Management Framework (RMF) implementation and documentation.
• DoD cybersecurity policies and compliance.
• System Authorization and Accreditation (A&A) processes.
• DoD cloud infrastructure security.

Responsibilities

• Assist in the development of security documentation including System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and other required system security engineering artifacts.
• Support RMF Authorization and Accreditation (A&A) activities, ensuring compliance with DoD and Air Force cybersecurity policies.
• Manage system user accounts, ports/protocols, PKI requirements, and access control lists.
• Implement and track system security updates, configurations, and vulnerability remediation in accordance with DoD requirements.
• Conduct risk and vulnerability assessments; recommend security policies, contingency plans, and disaster recovery procedures.
• Participate in system/network design to ensure alignment with security policies.
• Provide leadership in analyzing and integrating cybersecurity requirements into system design and operations.
• Review and assess the implementation of RMF security controls across system architecture, documentation, and design artifacts.
• Collaborate with stakeholders to ensure RMF A&A approval by all Authorizing Officials.
• Maintain and audit databases for classified information, visits, and clearances.
• Support classified material handling, accountability, and compliance with security classification guides.
• Develop and deliver security awareness training and education programs.
• Prepare and review acquisition security documentation and ensure compliance with CDRLs.
• Plan and implement security-related surveys, assessments, and evaluations throughout the program life cycle.

Skills

RMF

A&A

CI/CD

DevSecOps

DevOps

STIG

Communication

PKI

DoD policies

Security+

Education

Bachelor's Degree preferred

Security +

Tools

eMASS

DoD Cloud Security

Job description

KIHOMAC seeks an experienced security professional to support RMF/A&A activities and develop defense-grade security documentation for DoD systems, including guidance for cloud infrastructure and DevSecOps practices.

The role emphasizes cross-functional collaboration, evaluation of RMF controls, PKI and access management, and compliance with DoD cybersecurity policies throughout the program life cycle.