RMF Security Engineer (ISSE) – Azure Gov Pipeline

Total Force Alliance, LLC; Brandenburg (KY); On-site; USD 145,000 - 155,000; Full time

Benefits offered by this job

Medical, Dental & Vision

Mental Health Resources

PTO & Holidays

401(k) Matching

Insurance: Life, Accident & Injury

FSA / HSA

Job summary

Total Force Alliance, LLC seeks a Security Engineer / ISSE to lead RMF execution for secure enterprise apps delivered to federal customers on Azure Government. You will own SSP, POA&M, and evidence, coordinating with cloud engineers and government assessors to sustain ATO and ensure continuous monitoring.

Required are 7+ years in DoD security engineering, TS/SCI clearance, and hands-on RMF/AT0 experience, with strong writing and a focus on least-privilege and zero-trust controls in a

Qualifications

• 7+ years in information system security engineering for federal or DoD systems.
• Led RMF/ATO packages with SSP, POA&M, and artifacts.
• Hands-on experience with eMASS and NIST 800-53 control implementation and assessment.
• Experience hardening systems to DISA STIGs and validating compliance.
• Working knowledge of cloud security architecture — identity, network isolation, key management, SIEM/monitoring.
• Understanding of CUI handling (DoDI 5200.48) and the DoD Cloud Computing SRG impact levels.
• DoD 8140/8570-compliant certification for ISSE role (e.g., CISSP, CASP+).
• Strong technical writing and ability to produce assessor-ready evidence.

Responsibilities

• Own RMF execution — categorize, select, implement, assess, and support authorization under NIST and DoDI 8510.01
• Author and maintain the System Security Plan (SSP), POA&M, and full control-implementation evidence; manage the authorization package in eMASS
• Serve as the security engineering interface to the Government ISSM/AO and assessors; prepare for and support all assessment-and-authorization activities
• Implement and validate hardening against applicable DISA STIGs and track remediation to closure
• Design and operate the continuous-monitoring posture — audit logging, SIEM integration (Microsoft Sentinel / Log Analytics), and control-assessment cadence
• Engineer and verify the data-protection posture: encryption in transit and at rest, key management, and no secrets in source or image
• Own the CAC/PIV / DoD PKI validation design with the cloud and application engineers
• Enforce CUI handling and cross-domain/classified-data controls as applicable and spillage prevention
• Implement least-privilege access, zero-trust controls, and privileged-access administration
• Produce and maintain the security documentation and as-built records required for accreditation and handoff

Skills

RMF execution

DoD 8140/8570

NIST 800-53

eMASS

Cloud security

CUI handling

Tools

eMASS

Azure Government

DISA STIGs

Job description

Total Force Alliance, LLC seeks a Security Engineer / ISSE to lead RMF execution for secure enterprise apps delivered to federal customers on Azure Government. You will own SSP, POA&M, and evidence, coordinating with cloud engineers and government assessors to sustain ATO and ensure continuous monitoring.

Required are 7+ years in DoD security engineering, TS/SCI clearance, and hands-on RMF/AT0 experience, with strong writing and a focus on least-privilege and zero-trust controls in a