RMF Security Engineer — ATO Lead (Azure Gov)

Page Mechanical Group, Inc.; Fort Meade (MD); On-site; USD 145,000 - 155,000; Full time

Benefits offered by this job

Medical, Dental & Vision

Mental Health Resources

401(k) with Company Matching

Life, Accident & Injury Insurance

Flexible Spending Account (FSA)

Health Savings Account (HSA)

Certification Prep & Exam Reimb.

Virtual Personal & Professional Dev

Job summary

Total Force Alliance, LLC seeks a Security Engineer/ISSE to own RMF execution for secure federal apps on Azure Government. You will develop and maintain SSP/POA&M, drive ATO processes, and coordinate with Government evaluators to sustain Authority to Operate across environments.

You will harden systems to DISA STIGs, implement zero-trust controls, manage PKI/DoD validation, and oversee continuous monitoring with SIEM tooling. A TS/SCI clearance and DoD 8140/8570 aligned credentials are required.

Qualifications

• 7+ years in information system security engineering/cybersecurity for federal or DoD systems, with direct, hands-on RMF experience.
• Owns RMF authorization artifacts (SSP, POA&M) for multiple environments.
• Hands-on with eMASS and NIST 800-53 control implementation and assessment.
• Experience hardening against DISA STIGs and validating compliance.
• Cloud security knowledge across identity, network isolation, key management, and SIEM.
• Understanding of CUI handling and DoD Cloud SRG impact levels.
• DoD 8140/8570-compliant certification (e.g., CISSP, CASP+).
• Strong technical writing to produce assessor-ready evidence.

Responsibilities

• Own RMF execution and authorization activities under NIST 800-37/800-53 and DoDI 8510.01.
• Author and maintain SSP, POA&M, and control-implementation evidence; manage packages in eMASS.
• Interface with Government ISSM/AO and assessors for ATO/cATO processes.
• Implement and validate DISA STIG hardening and track remediation to closure.
• Design and operate continuous-monitoring with SIEM integration and cadence.
• Protect data: encryption, key management, and no secrets in code or images.
• Manage DoD PKI validation design with cloud and app teams.
• Enforce CUI handling and cross-domain controls as applicable.
• Implement least-privilege, zero-trust, and privileged-access controls.
• Produce security documentation and as-built records for accreditation.

Skills

RMF execution

NIST 800-53

eMASS

Cloud security

DoD 8140/8570

CISSP/CASP

TS/SCI clearance

Security engineering

Education

CISSP-ISSEP

Tools

eMASS

Microsoft Sentinel

Azure Government

DISA STIGs

Key Vault / KMS

Job description

Total Force Alliance, LLC seeks a Security Engineer/ISSE to own RMF execution for secure federal apps on Azure Government. You will develop and maintain SSP/POA&M, drive ATO processes, and coordinate with Government evaluators to sustain Authority to Operate across environments.

You will harden systems to DISA STIGs, implement zero-trust controls, manage PKI/DoD validation, and oversee continuous monitoring with SIEM tooling. A TS/SCI clearance and DoD 8140/8570 aligned credentials are required.