Sr Information Assurance Engineer

IntrepidGS; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Job summary

Intrepid Acquisition Holdings, LLC is seeking a Senior Information Assurance Engineer to serve as a subject matter expert for cybersecurity compliance, governance, and risk management across DoD systems. The role applies the DoD RMF lifecycle, supports CCRI preparations, and manages A&A activities within eMASS to maintain cyber readiness.

A Secret clearance and 8–10 years of IA experience in DoD environments are required, with knowledge of DoD directives and NIST publications.

Qualifications

• DoD RMF lifecycle implementation
• CCRI processes and compliance scoring
• eMASS workflow and security documentation
• DoD/NIST/Army policies knowledge
• IAT II compliant certification

Responsibilities

• Lead cybersecurity governance across Army/IMCOM systems
• Apply DoD RMF to categorize, assess, authorize and monitor systems
• Prepare and manage cybersecurity documentation in eMASS
• Support CCRI prep and remediation actions
• Enforce DoD/NIST/Army security directives and policies
• Coordinate with CSSPs and assessors to close gaps
• Monitor logs and continuous monitoring per RMF Step 6
• Provide risk analysis to leadership and system owners

Skills

RMF

Risk assessment

Cyber governance

Technical writing

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

eMASS

CCRI

Job description

Position is contingent upon contract awardThe Senior Information Assurance Engineer serves as the subject matter expert for cybersecurity compliance, governance, and risk management across Army IMCOM-E and DoD information systems. This role provides leadership in the application of the DoD Risk Management Framework (RMF), supports Command Cyber Readiness Inspections (CCRI), and manages system assessment and authorization (A&A) activities within Enterprise Mission Assurance Support Service (eMASS). The engineer ensures that all systems under IMCOM authority maintain cybersecurity posture in alignment with Federal, DoD, and Army information assurance policies, directives, and operational requirements.ESSENTIAL JOB FUNCTIONS:Lead cybersecurity governance and compliance activities across Army and IMCOM systems.Apply DoD RMF processes to categorize, assess, authorize, and continuously monitor information systems.Prepare, upload, and manage cybersecurity documentation within eMASS, ensuring accuracy and audit readiness.Support and lead CCRI preparations, remediation efforts, and response actions to maintain cyber readiness scoring.Interpret and enforce Federal (NIST), DoD, and Army cybersecurity policies, including DoDI 8510.01, AR 25-series, and associated guidance.Provide risk analysis and recommendations to Command leadership, ISSMs, and system owners for cyber posture improvements.Conduct vulnerability assessments, track POA&Ms, and validate remediation actions to ensure compliance with security controls.Develop IA policies, standard operating procedures, and security architecture/design artifacts to support accreditation activities.Coordinate with system stakeholders, cybersecurity service providers (CSSPs), and external assessors to resolve security gaps.Ensure continuous monitoring, logs review, and reporting are performed in alignment with RMF Step 6 requirements.Represent IMCOM cybersecurity interests during planning sessions, system design changes, configuration control boards, and audits.Maintain current knowledge of emerging cyber threats, mitigation technologies, and compliance mandates impacting Army systems.EDUCATION & EXPERIENCE:Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).Minimum 8–10 years of Information Assurance engineering experience supporting DoD environments.Demonstrated expertise with:DoD RMF lifecycle implementationCCRI processes and compliance scoringeMASS workflow and security documentationStrong working knowledge of DoD cybersecurity directives, NIST 800-series publications, and Army-specific policies.LICENSE & CERTIFICATIONS:IAT II CompliantKNOWLEDGE & SKILLS:Capability to identify, assess, and mitigate cyber risks impacting confidentiality, integrity, and availability of Army information systems.Strong communication and technical writing skills for senior leader and accreditation audiences.TRAVEL: 15% or MoreSECURITY CLEARANCE: Active Secret requiredIntrepid Acquisition Holdings, LLCwww.intrepidgs.comIntrepid Acquisition Holdings, LLC. (IAH), is a leading provider of global-scale logistics, facilities management, and advanced professional and technical services. IAH provides a broad spectrum of services and solutions to U.S. and international government agencies, and organizations. As a world-class leader in providing seasoned program management, IAH leverages and integrates its capabilities to provide safe, innovative, and reliable solutions to meet customers' diverse and complex challenges.Intrepid Acquisition Holdings, LLC. (“IAH” and/or “Company”) and its affiliates, including but not limited to IAP World Services, Inc., Readiness Management Support L.C., JPATS Logistics Services, LLC., and subsidiaries is an EOE, including disability/vets.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.