Cybersecurity Engineer III

Wichita Tribal Enterprise • Lakewood, CO

12h • Onsite

About The Position

This position is contingent upon contract award. Wichita Tribal Service, a Quivera Enterprises company, is seeking an experienced Cybersecurity Engineer III to support the implementation, assessment, and continuous improvement of enterprise cybersecurity and information assurance programs within a Federal civilian agency environment. This senior-level position serves as a technical cybersecurity expert responsible for implementing the NIST Risk Management Framework (RMF), ensuring Federal Information Systems Modernization Act (FISMA) compliance, and supporting ongoing authorization and continuous monitoring activities for enterprise information systems. The Cybersecurity Engineer III works closely with Information System Security Officers (ISSOs), system owners, architects, engineers, and Federal stakeholders to develop secure solutions, maintain authorization documentation, conduct security assessments, and implement cybersecurity best practices across traditional and cloud-hosted environments. The ideal candidate possesses extensive knowledge of federal cybersecurity policies, NIST standards, governance, risk, and compliance (GRC) tools, and information system security engineering principles. This position offers the opportunity to support mission-critical federal programs while working alongside experienced cybersecurity professionals in a collaborative and rapidly growing organization. High-performing employees who consistently demonstrate exceptional results, leadership, and initiative will find significant opportunities for accelerated career growth and advancement.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, Engineering, or a related field.
• Minimum 7 years of progressively responsible cybersecurity, information assurance, or information system security experience supporting Federal information systems.
• Demonstrated experience implementing FISMA requirements.
• Extensive knowledge of the NIST Risk Management Framework (RMF).
• Experience interpreting and implementing NIST SP 800-37 guidance.
• Strong understanding of NIST SP 800-53 security controls and assessment processes.
• Experience developing and maintaining Federal cybersecurity documentation.
• Experience conducting continuous monitoring activities for authorized systems.
• Experience managing and tracking POA&M activities.
• Knowledge of Federal privacy requirements including: Privacy Impact Assessments (PIAs), Personally Identifiable Information (PII).
• Experience serving as an Information System Security Officer (ISSO) or performing equivalent responsibilities.
• Experience implementing RMF requirements for cloud-hosted information systems.
• Experience using Xacta 360 Governance, Risk, and Compliance (GRC) platform.
• Excellent written, verbal, presentation, and interpersonal communication skills.
• Ability to interpret complex Federal cybersecurity policies and communicate technical concepts to diverse audiences.
• Ability to work independently while managing multiple priorities within a Federal environment.

Nice To Haves

• Experience supporting the U.S. Department of the Interior, Bureau of Reclamation, or other civilian Federal agencies.
• Experience supporting Operational Technology (OT) environments.
• Knowledge of Industrial Control Systems (ICS) cybersecurity.
• Experience supporting Geographic Information Systems (GIS).
• Familiarity with cloud security architectures including Microsoft Azure or AWS Government environments.
• Experience supporting cybersecurity audits, Inspector General reviews, or Federal compliance assessments.
• Experience mentoring junior cybersecurity personnel.
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Access Specialist (CASp)
• Additional DoD 8570/8140 or cybersecurity certifications are a plus.

Responsibilities

• Support implementation and maintenance of agency cybersecurity programs in accordance with FISMA, NIST guidance, and Federal security requirements.
• Apply the NIST SP 800-37 Risk Management Framework (RMF) throughout the system development lifecycle.
• Develop, maintain, and update system authorization documentation including: System Security Plans (SSPs), Privacy Plans, Contingency Plans, Incident Response Plans, Configuration Management Plans, Security Assessment Reports, Plans of Action and Milestones (POA&Ms).
• Conduct continuous monitoring activities to ensure security controls remain effective and compliant.
• Evaluate security controls in accordance with NIST SP 800-53 and document implementation evidence.
• Assist with Authorization to Operate (ATO), Authority to Test (ATT), and continuous authorization activities.
• Develop cybersecurity implementation guidance based on evolving Federal cybersecurity policies and standards.
• Interpret Federal cybersecurity directives and translate requirements into practical implementation guidance.
• Support security assessments, audits, vulnerability remediation, and corrective action activities.
• Maintain security documentation using Xacta 360 Governance, Risk, and Compliance (GRC).
• Collaborate with ISSOs, system administrators, engineers, and business stakeholders to implement secure architectures.
• Participate in configuration management activities supporting secure system baselines.
• Assist with cloud security implementation utilizing RMF guidance for cloud-hosted systems.
• Support Privacy Impact Assessments (PIAs) and protection of Personally Identifiable Information (PII).
• Develop cybersecurity policies, procedures, standards, work instructions, and technical guidance.
• Provide cybersecurity recommendations during system design, modernization, and implementation efforts.
• Support incident response activities and cybersecurity compliance reporting.
• Participate in security awareness initiatives and cybersecurity training activities.
• Coordinate with Federal and interagency teams to ensure compliance with government security requirements.
• Provide technical consultation and mentoring to junior cybersecurity staff when appropriate.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior