RMF/ATO Cyber Engineer for VA Compliance

Integral; Tysons (VA); Hybrid; USD 148,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental & Vision Insurance

401(k) with immediate vesting

Paid Time Off & Holidays

Professional Training Reimbursement

Employee Assistance Program

Job summary

Integral is seeking a Cyber RMF/ATO Engineer to sustain RMF compliance and ATO readiness for VA products and environments. You will coordinate with VA teams, perform continuous monitoring, and manage ATO documentation across federal programs.

The role requires deep RMF/NIST knowledge, reporting, and experience with VA security tools, SIEM, and vulnerability management in a federal context.

Qualifications

• Bachelor’s Degree in computer science or IT related degree with 7-10 years' experience.
• Deep knowledge of RMF, NIST 800-53, VA Handbook 6500 series, federal ATO processes, and VA cybersecurity standards.
• Familiar with VA-approved security tools: Nessus, WASA, SCCD, Pen testing tools, ConMon/Ongoing Authorization, eMASS, or ServiceNow CAM.
• Experience with continuous monitoring, logging, SIEM tools, intrusion detection, and incident response.
• Working knowledge of networks, distributed systems, application security, and vulnerability scanning of infrastructure and software.
• Excellent documentation and audit-readiness skills.
• Public Trust

Responsibilities

• Ensures continuous monitoring, vulnerability remediation, audit support, secure configuration management, and documentation required for A&A and ongoing ATO sustainment.
• Maintain and continuously update ATO packages for all supported products and environments.
• Facilitate VA A&A processes and coordinate with Product teams, VA OIS, and external partners to ensure RMF compliance.
• Ensure adherence to VA security policies, standards, federal law, and NIST SP 800-37 Rev 2 guidelines.
• Coordinate and execute required VA security scans including: Nessus, Database Scans, WASA, SCCD, Threat Modeling, Penetration Tests, ConMon, and OA.
• Upload and track scan results in eMASS or other VA-approved repositories.
• Maintain, update, and manage the full suite of ATO documentation
• Implement and maintain Continuous Monitoring and Operations Support CONOPS Plan.

Skills

RMF knowledge

NIST 800-53

VA cybersecurity standards

Vulnerability scanning

SIEM & logs

Incident response

Networks & distributed systems

Documentation & audit-readiness

Public Trust

Education

Bachelor’s Degree in computer science or IT

Tools

Nessus

WASA

SCCD

Penetration testing tools

ConMon/Ongoing Authorization

eMASS

ServiceNow CAM

Job description

Integral is seeking a Cyber RMF/ATO Engineer to sustain RMF compliance and ATO readiness for VA products and environments. You will coordinate with VA teams, perform continuous monitoring, and manage ATO documentation across federal programs.

The role requires deep RMF/NIST knowledge, reporting, and experience with VA security tools, SIEM, and vulnerability management in a federal context.