Associate RMF & ATO Engineer

i4DM • Millersville, MD

5d

About The Position

We are seeking a motivated and detail-oriented Associate RMF & ATO Security Engineer to support RMF, ATO, cybersecurity, and continuous monitoring activities for VA enterprise cloud platforms. Working alongside senior cybersecurity, cloud, DevSecOps, and Site Reliability Engineers, you will help implement security controls, maintain authorization packages, support continuous monitoring, and strengthen the security posture of mission-critical healthcare systems while growing your technical expertise.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or equivalent experience.
• 1–3 years of experience in cybersecurity, RMF, information assurance, cloud security, or related technical roles.
• Foundational knowledge of NIST RMF, NIST SP 800-53, FISMA, and Federal cybersecurity concepts.
• Basic understanding of AWS, Linux, networking, and cloud-native technologies.
• Exposure to vulnerability management, security documentation, or compliance activities.
• Familiarity with Python, PowerShell, or Bash scripting is a plus.
• Ability to work effectively in a collaborative engineering environment.
• Eligible to obtain and maintain a Public Trust clearance.

Nice To Haves

• CompTIA Security+, AWS Cloud Practitioner, or equivalent certification.
• Exposure to Kubernetes, Docker, Terraform, or CI/CD platforms.
• Familiarity with Nessus, Splunk, Grafana, or similar tools.
• Understanding of VA, Federal, or healthcare cybersecurity environments.

Responsibilities

• Assist with implementation of NIST RMF security controls throughout the system lifecycle.
• Support development and maintenance of SSPs, POA&Ms, Security Assessment Reports, contingency plans, and authorization documentation.
• Help perform continuous monitoring, vulnerability tracking, and remediation validation.
• Support security assessments, control testing, and evidence collection for ATO activities.
• Assist with integrating SAST, DAST, container scanning, and IaC validation into CI/CD pipelines.
• Support AWS cloud and Kubernetes security configuration reviews.
• Participate in cybersecurity incident response and documentation.
• Collaborate with Cloud, DevSecOps, SRE, and software engineering teams.
• Maintain security documentation and configuration records.
• Continuously develop cloud security and RMF skills through mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level