Senior IA Security Lead: RMF, Cloud & DevSecOps

Integral Federal, Inc.; Fort Meade (MD); On-site; USD 165,000 - 188,000; Full time

Job summary

Integral Federal, Inc. seeks a Lead Information Assurance Specialist to oversee RMF implementation and continuous monitoring for JPES across containerized, cloud-hosted environments in Azure, integrated with DISA DevSecOps pipelines.

The role requires deep experience securing web apps, APIs, Kubernetes, and databases in SIPR and IL6 environments. Lead RMF in eMASS, apply STIGs to RHEL, Kubernetes, Tomcat, PostgreSQL and web stacks, coordinate vulnerability scanning with ACAS/Nessus and Fortify,

Qualifications

• BA/BS in Engineering; four years of experience in lieu of degree accepted.
• 10+ years IA/RMF experience in DoD environments.
• Experience securing containerized applications.
• Experience with DevSecOps security integration.
• Experience with Azure IL6 and/or DISA-hosted environments.
• Active Secret clearance; Security+ required; CISSP preferred.

Responsibilities

• Lead RMF lifecycle activities in eMASS.
• Implement and validate STIGs for RHEL, Kubernetes, Tomcat, PostgreSQL, and web stacks.
• Oversee vulnerability scanning with ACAS/Nessus and Fortify.
• Integrate security findings into Agile sprint remediation.
• Manage POA&M lifecycle and coordinate risk acceptance.
• Support ATO sustainment in multi-enclave cloud environments.
• Support security for REST APIs and cross-system data exchange.

Skills

IA/RMF DoD experience

Containerized apps security

DevSecOps security integration

Azure IL6 / DISA environments

Active Secret clearance

Security+ certification

CISSP preferred

Education

BA/BS in Engineering

Tools

ACAS/Nessus

Fortify

eMASS

Job description

Integral Federal, Inc. seeks a Lead Information Assurance Specialist to oversee RMF implementation and continuous monitoring for JPES across containerized, cloud-hosted environments in Azure, integrated with DISA DevSecOps pipelines.

The role requires deep experience securing web apps, APIs, Kubernetes, and databases in SIPR and IL6 environments. Lead RMF in eMASS, apply STIGs to RHEL, Kubernetes, Tomcat, PostgreSQL and web stacks, coordinate vulnerability scanning with ACAS/Nessus and Fortify,