Senior RMF Engineer & Security Authorization Lead

Quivera Enterprises, LLC; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

Wichita Tribal Enterprises, a Quivera Enterprises company, seeks an experienced Information Security Engineer III to lead RMF implementation and authorizations for DOI/IA/OIT systems. You will develop security artifacts, assess risks, and advise leadership on enterprise cybersecurity strategy.

The role requires deep expertise in RMF, NIST SP 800-53, and security control assessments, collaborating with federal stakeholders and technical teams to ensure secure, compliant operations across the SDLC.

Qualifications

• Bachelor's degree and six (6) years of relevant experience; or Master's degree and five (5) years of relevant experience; or Eight (8) years of directly related experience in lieu of a degree.
• Industry-recognized cybersecurity certification may substitute for one year of experience.
• Minimum four (4) years of full-time experience conducting security assessments and developing RMF authorization packages.
• Experience implementing the NIST Risk Management Framework (RMF).
• Extensive experience developing Authority to Operate (ATO) packages.

Responsibilities

• Lead RMF implementation across the system development lifecycle.
• Develop, maintain, and update authorization packages supporting ATO, IATT, and continuous authorization.
• Develop and maintain System Security Plans and related RMF artifacts.
• Conduct security categorization and control selection per FIPS 199/200 and NIST SPs.

Skills

RMF implementation

ATO packages

Security assessments

NIST SP 800-53

NIST SP 800-37

Vulnerability management

Policy writing

Stakeholder communication

Education

Bachelor's degree

Master's degree

8 years experience in lieu of degree

Job description

Wichita Tribal Enterprises, a Quivera Enterprises company, seeks an experienced Information Security Engineer III to lead RMF implementation and authorizations for DOI/IA/OIT systems. You will develop security artifacts, assess risks, and advise leadership on enterprise cybersecurity strategy.

The role requires deep expertise in RMF, NIST SP 800-53, and security control assessments, collaborating with federal stakeholders and technical teams to ensure secure, compliant operations across the SDLC.