Senior Cyber Engineer: RMF & Secure Architect

Booz Allen Hamilton; Maryland; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cyber Engineer to design and implement cybersecurity engineering solutions across complex networks, ensure regulatory compliance, and mentor junior staff. You will work with RMF controls, STIGs, and secure architectures to reduce risk and strengthen defensible configurations.

The role emphasizes hands-on vulnerability management, automation with PowerShell and Python, and documenting security controls in eMASS or similar platforms.

Qualifications

• 8+ years of cybersecurity engineering experience in enterprise IT or mission systems.
• 5+ years implementing RMF controls, STIGs, secure architectures, across multi-vendor environments.
• Experience using eMASS or GRC platforms to document security controls and manage RMF artifacts.
• Vulnerability management experience with ACAS or Nessus and remediation efforts.
• DoW RMF, A&A processes, NIST SP 800-53 knowledge; DoD policies.
• Secret clearance and a BS in a related field; Security+ or higher certification.

Responsibilities

• Design and implement cybersecurity engineering solutions and secure configurations.
• Mentor and supervise team members; work without considerable direction.
• Support DoW cybersecurity compliance and continuous monitoring activities.
• Develop artifacts, control implementation details, and POA&M.
• Collaborate across complex networks to meet regulatory requirements.

Skills

Cybersecurity engineering

RMF controls

eMASS/GRC platforms

Vulnerability management

Scripting: PowerShell

Scripting: Python

NIST SP 800-53

Security+ Certification

DoD RMF/A&A

ACAS/Nessus

Education

Bachelor's degree in Cybersecurity, CS, IT, or Engineering

Security+ Certification

Tools

ACAS

Nessus

SCAP

SIEM

EDR

eMASS

Job description

Booz Allen Hamilton is seeking a Cyber Engineer to design and implement cybersecurity engineering solutions across complex networks, ensure regulatory compliance, and mentor junior staff. You will work with RMF controls, STIGs, and secure architectures to reduce risk and strengthen defensible configurations.

The role emphasizes hands-on vulnerability management, automation with PowerShell and Python, and documenting security controls in eMASS or similar platforms.