RMF Security Engineer — DoD Cloud & A&A Expert

Archer; Springfield (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

MANTECH seeks a motivated Security Engineer to join our team in Springfield, VA. This role serves as the Assessment & Authorization (A&A) authority for the NGA MC&G CPSTN Digital Twin Pilot, working with the TPM and DevOps to design, implement, and maintain a secure posture.

You will lead RMF activities, document controls with automated tools, and collaborate with NGA ISSOs/AOs to clear security roadblocks, ensuring parity between the digital twin and live NGA CORE environment.

Qualifications

• 10+ years of experience with High School Diploma or 6–10 years with Bachelor's degree
• 3+ years RMF support for DoD/IC
• Hybrid cloud security with Ansible or QEMU-KVM
• IATT/ATO lifecycle experience
• Knowledge of ICD 503, NIST SP 800-53, CNSSI 1253, DISA STIGs

Responsibilities

• Lead compilation of the Body of Evidence for RMF ATO milestones.
• Use automated RMF tools to document and map controls in IL6 cloud.
• Review and harden deployment scripts (Ansible, Terraform) for secure provisioning.
• Deploy and manage automated scanners (Nessus, SCC, static analysis) to identify vulnerabilities.
• Audit and secure containerized environments and service mesh configurations.
• Interface NGA ISSOs and AOs to clear security roadblocks.
• Ensure Drift Management parity between digital twin and NGA CORE production.

Skills

RMF processes

Hybrid cloud security

Ansible

QEMU-KVM

CISSP / CISSP-ISSEP / CISM / CAP (cert

Education

Bachelor’s degree in Cybersecurity, Systems Engineering, or related field

Tools

Telos XACTA

Nessus (ACAS)

SCAP Compliance Checker

Static code analysis tools

Ansible

Terraform

Job description

MANTECH seeks a motivated Security Engineer to join our team in Springfield, VA. This role serves as the Assessment & Authorization (A&A) authority for the NGA MC&G CPSTN Digital Twin Pilot, working with the TPM and DevOps to design, implement, and maintain a secure posture.

You will lead RMF activities, document controls with automated tools, and collaborate with NGA ISSOs/AOs to clear security roadblocks, ensuring parity between the digital twin and live NGA CORE environment.