RMF & Cybersecurity Engineer I

Client Solution Architects; Arlington (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Client Solution Architects (CSA) is seeking an Engineer I to support onsite in the Arlington, VA area. You will execute RMF processes, prepare A&A packages, and manage eMASS workflows to sustain Authority to Operate for Navy systems.

Key duties include vulnerability management, applying DISA STIGs/SRGs, and providing cybersecurity engineering support for secure architectures and cross-domain integration.

Qualifications

• Active Secret Clearance required or ability to obtain it.
• 5+ years in RMF, cybersecurity, system integration, or data integration.
• Working knowledge of DoD/DON cybersecurity requirements and directives.

Responsibilities

• Execute RMF activities across system categorization, control selection, implementation, assessment and authorization.
• Prepare A&A packages to achieve and sustain ATO for Navy information systems.
• Manage RMF packages in eMASS and track status through NAO, SCA, and Validator queues.
• Conduct enterprise vulnerability management including scanning, remediation tracking and reporting.
• Apply DISA STIGs and SRGs to strengthen operating systems, apps, and network devices.
• Provide cybersecurity engineering support for secure system architectures.
• Support data and system integration for secure, interoperable networks.
• Ensure policy compliance and prepare documentation for inspections and audits.
• Support incident response and electronic spillage management with government leads.
• Maintain configuration docs and artifacts; collaborate with government and contractor teams.
• Develop DoD 8140-aligned cyber workforce tracking and dashboards.

Skills

RMF

A&A packages

eMASS

DISA STIGs

Vulnerability scanning

Network security

DoD requirements

CASP+

Security+

SSCP

Job description

Client Solution Architects (CSA) is seeking an Engineer I to support onsite in the Arlington, VA area. You will execute RMF processes, prepare A&A packages, and manage eMASS workflows to sustain Authority to Operate for Navy systems.

Key duties include vulnerability management, applying DISA STIGs/SRGs, and providing cybersecurity engineering support for secure architectures and cross-domain integration.