Secret Clearance Cybersecurity Engineer: RMF & Cloud

ThinkTek LLC; Arlington (VA); On-site; USD 150,000 - 185,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

Paid time off

Job summary

ThinkTek LLC is seeking an experienced Cybersecurity Engineer to support a Federal Government customer by implementing and assessing security controls, maintaining authorization packages, and conducting security assessments across on-premises, cloud, and SaaS environments.

The role requires deep expertise in RMF, CSRMC, cATO, and Zero Trust initiatives, along with an active Secret security clearance and a strong background in GRC processes.

Qualifications

• Active Secret clearance required.
• Bachelor's degree in a technical field from an accredited university.
• Minimum 5 years of dedicated cybersecurity experience.
• At least 3 consecutive years supporting DoD cybersecurity programs.
• Experience with RMF authorization processes and eMASS.

Responsibilities

• Lead RMF and CSRMC activities including system authorization and continuous monitoring.
• Maintain eMASS records, artifacts, and POA&Ms.
• Assess NIST 800-53, DoD RMF, DISA STIG, and FedRAMP controls.
• Develop SAPs, SARs, and RARs and related memos.
• Collaborate with stakeholders to implement controls and reduce risk.
• Support DevSecOps and cloud security initiatives across environments.

Skills

Active Secret Security Clearance

RMF cybersecurity

Cloud security (AWS/Azure)

Vulnerability analysis

Risk assessment

Education

Bachelor's degree in Information Technology, Computer Science, Engineering or related field

Tools

eMASS

CaC/PaC tooling

Automated security scanning

Job description

ThinkTek LLC is seeking an experienced Cybersecurity Engineer to support a Federal Government customer by implementing and assessing security controls, maintaining authorization packages, and conducting security assessments across on-premises, cloud, and SaaS environments.

The role requires deep expertise in RMF, CSRMC, cATO, and Zero Trust initiatives, along with an active Secret security clearance and a strong background in GRC processes.