Associate RMF & ATO Engineer

Description

About Our Team 

Our employees thrive in a culture that's fast-paced and ego-free, where innovation and collaboration are encouraged at every turn. We are an organization that provides federal agencies instant access to experienced and talented professionals who understand their unique challenges and know the most efficient ways to address them. We are continually investing in resources and talent, so we stay prepared with specialized teams in place who are experts in creating tailored technologies. Our solutions empower Federal organizations to grow, modernize, and succeed in a rapidly evolving landscape.  

We value all voices and want to attract talent from all backgrounds. We're on the lookout for individuals who are passionate about technology and thrive in environments where problem-solving is approached with creativity and enthusiasm. If you're someone who enjoys continuously expanding your skill set while tackling real-world business problems, you'll feel right at home with us. Veterans and military spouses are especially encouraged to bring your unique and valuable experience to our team. 

About the Role 

We are seeking a motivated and detail-oriented Associate RMF & ATO Security Engineer to support RMF, ATO, cybersecurity, and continuous monitoring activities for VA enterprise cloud platforms. Working alongside senior cybersecurity, cloud, DevSecOps, and Site Reliability Engineers, you will help implement security controls, maintain authorization packages, support continuous monitoring, and strengthen the security posture of mission-critical healthcare systems while growing your technical expertise. 

RESPONSIBILITIES 

• Assist with implementation of NIST RMF security controls throughout the system lifecycle. 
• Support development and maintenance of SSPs, POA&Ms, Security Assessment Reports, contingency plans, and authorization documentation. 
• Help perform continuous monitoring, vulnerability tracking, and remediation validation. 
• Support security assessments, control testing, and evidence collection for ATO activities. 
• Assist with integrating SAST, DAST, container scanning, and IaC validation into CI/CD pipelines. 
• Support AWS cloud and Kubernetes security configuration reviews. 
• Participate in cybersecurity incident response and documentation. 
• Collaborate with Cloud, DevSecOps, SRE, and software engineering teams. 
• Maintain security documentation and configuration records. 
• Continuously develop cloud security and RMF skills through mentorship. 

TAG: #LI-I4DM

TAG: INDMJC

Requirements

QUALIFICATIONS 

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or equivalent experience. 
• 1–3 years of experience in cybersecurity, RMF, information assurance, cloud security, or related technical roles. 
• Foundational knowledge of NIST RMF, NIST SP 800-53, FISMA, and Federal cybersecurity concepts. 
• Basic understanding of AWS, Linux, networking, and cloud-native technologies. 
• Exposure to vulnerability management, security documentation, or compliance activities. 
• Familiarity with Python, PowerShell, or Bash scripting is a plus. 
• Ability to work effectively in a collaborative engineering environment. 
• Eligible to obtain and maintain a Public Trust clearance. 

PREFERRED QUALIFICATIONS 

• CompTIA Security+, AWS Cloud Practitioner, or equivalent certification. 
• Exposure to Kubernetes, Docker, Terraform, or CI/CD platforms. 
• Familiarity with Nessus, Splunk, Grafana, or similar tools. 
• Understanding of VA, Federal, or healthcare cybersecurity environments.