RMF Cyber Systems Engineer (DARC)

Actalent; Colorado Springs (CO); On-site; USD 140,000 - 165,000; Full time

Job summary

Actalent is seeking a DARC Cyber Systems Engineer to assess, secure, and monitor complex DoD/NIST compliant systems. You will perform RMF-based assessments, maintain eMASS records, and drive remediation with engineering teams and government personnel.

The role requires DoD 8570.01M IAT II certification (Security+ CE, CCNA Security, GSEC, or SSCP), a current Secret clearance, and extensive experience with ACAS, Nessus, STIGs, and RMF artifacts.

Qualifications

• Experience with RMF cybersecurity lifecycle and creating testable requirements.
• Proficient in performing vulnerability and compliance scans (ACAS, Nessus, tenable.sc).
• Hands-on with STIGs and STIG hardening of systems.
• Linux administration and security hardening (RHEL).
• Familiarity with DoD/NIST policies (SP 800-53, 800-115).
• Strong documentation and reporting skills for A&A artifacts.

Responsibilities

• Perform system and network assessments to identify deviations from configurations and policies.
• Author, update, and review security testing docs and MRPs to support continuous monitoring.
• Conduct RMF-based assessments and contribute to SAR/RAR reports.
• Maintain RMF eMASS records and program office coordination.
• Prepare RMF artifacts and POA&M for A&A activities.
• Assist in implementing DoD/NISPOM policies and tailoring processes.

Skills

RMF lifecycle

Vulnerability assessments

STIG hardening

Linux administration (RHEL)

NIST/DoD policies

Documentation & reporting

RMF artifacts coordination

Education

Bachelor's degree

Master's degree

PhD

Tools

ACAS

Nessus

tenable.sc

STIG Viewer

SCAP

Evaluate-STIG

STIG Manager

eMASS

Job description

Actalent is seeking a DARC Cyber Systems Engineer to assess, secure, and monitor complex DoD/NIST compliant systems. You will perform RMF-based assessments, maintain eMASS records, and drive remediation with engineering teams and government personnel.

The role requires DoD 8570.01M IAT II certification (Security+ CE, CCNA Security, GSEC, or SSCP), a current Secret clearance, and extensive experience with ACAS, Nessus, STIGs, and RMF artifacts.