Senior RMF Engineer: Cloud Security & ATO Readiness

LTS; United States; Remote; USD 110,000 - 125,000; Full time

Benefits offered by this job

Comprehensive benefits

Career growth opportunities

Access to cutting-edge tools

Job summary

LTS seeks a Senior Security RMF Engineer to join a cybersecurity transformation surge for the VA.gov Platform. You’ll bridge VA security/RMF requirements with engineering teams implementing controls across cloud and software pipelines.

The role emphasizes translating control deficiencies into engineering work, supporting ATO readiness, and driving security outcomes with DevSecOps partners. Remote US-based role with strong compensation.

Qualifications

• NIST RMF and NIST 800-53 expertise
• Experience supporting ATOs for complex information systems
• Experience conducting security control assessments and risk analyses
• Ability to translate compliance into technical backlog items
• Strong written communication and documentation skills

Responsibilities

• Assess VA.gov Platform compliance with the 18 Critical Controls and identify gaps
• Perform security reviews, gap analyses, and risk assessments across Platform
• Support ongoing ATO and cATO readiness for VA.gov Platform authorization boundary
• Develop and maintain SSPs, control narratives, POA&Ms, BIAs, PTAs and evidence
• Translate identified deficiencies into prioritized remediation work with engineering teams
• Validate remediation against security-control requirements and update documentation
• Support OSCAL-based security models and automated evidence collection
• Develop and maintain POA&M processes and lifecycle automation
• Conduct threat modeling and secure-design reviews
• Coordinate MOUs and ISAs as required
• Engage with VA security stakeholders and auditors
• Provide security guidance to product teams and training resources
• Assist incident response and post-incident analysis

Skills

NIST RMF

ATO support

SSP & POAM

Cloud infrastructure

CI/CD pipelines

Threat modeling

Communication

Education

Associate/Bachelor degree options in lieu of degree

Five years cyber security engineer experience in lieu of degree

Tools

OSCAL

AWS

Kubernetes

GitHub Actions

Infrastructure-as-Code

Job description

LTS seeks a Senior Security RMF Engineer to join a cybersecurity transformation surge for the VA.gov Platform. You’ll bridge VA security/RMF requirements with engineering teams implementing controls across cloud and software pipelines.

The role emphasizes translating control deficiencies into engineering work, supporting ATO readiness, and driving security outcomes with DevSecOps partners. Remote US-based role with strong compensation.