RMF Security Engineer — Cloud & ATO Focus

CACI International Inc.; Chantilly (VA); On-site; USD 109,000 - 182,000; Full time

Job summary

CACI International Inc. seeks an Information Systems Security Engineer to lead RMF/ATO activities and ensure secure architectures across cloud and on-prem environments.

You will work with developers, systems engineers, and government stakeholders to integrate security into the SDLC and maintain continuous monitoring. The role requires TS/SCI clearance, DoD 8570 IAT Level II, and at least five years in cybersecurity.

Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related degree.
• Minimum of 5 years of progressive experience in Cybersecurity, Information Assurance, or related background.
• Active TS/SCI clearance.
• DoD 8570 IAT Level II Compliance (e.g., Security+, CCNA Security, or CySA+).

Responsibilities

• RMF & ATO Management: Lead the end-to-end Risk Management Framework (RMF) process, managing NIST 800-53/171 control sets and coordinating with cybersecurity entities (SCA/DAO) to secure and maintain Authority to Operate (ATO).
• Security Engineering & Cloud Oversight: Drive "security by design" by reviewing technical change requests, evaluating new technologies, and providing security oversight for cloud-based platforms (AWS/Azure).
• Vulnerability & Risk Mitigation: Conduct system inspections and vulnerability assessments to manage POA&Ms, prioritize system patching, and ensure robust disaster recovery and contingency planning.
• Technical Compliance & Monitoring: Establish continuous monitoring protocols to track security posture, enforce cybersecurity policies, and brief complex technical risks to senior stakeholders.

Skills

RMF experience

Cloud security

Vulnerability assessment

Compliance & monitoring

Stakeholder communication

Security engineering

Education

Bachelor's Degree in CS/IT/Cybersecurity/Engineering

Tools

XACTA

SNOW

Nessus

Splunk

Anchore

AWS

Azure

Job description

CACI International Inc. seeks an Information Systems Security Engineer to lead RMF/ATO activities and ensure secure architectures across cloud and on-prem environments.

You will work with developers, systems engineers, and government stakeholders to integrate security into the SDLC and maintain continuous monitoring. The role requires TS/SCI clearance, DoD 8570 IAT Level II, and at least five years in cybersecurity.