Information Assurance Engineer - 30930

HII•Arlington, TX

10d•Hybrid

About The Position

HII – Mission Technologies is seeking an Information Assurance Engineer to support a government customer within the Department of War (DoW) CIO organization. The role will secure the VIPER engineering model, an RF environment channel emulation tool, for accreditation and installation on the DoW CIO network. The engineer will create the required Risk Management Framework (RMF) artifacts and documentation and guide the product through the full accreditation process, working closely with the DoW CIO ISSM and other government stakeholders to meet cybersecurity requirements and attain an Authority to Operate (ATO). The position is located in Arlington, Virginia. It currently requires on-site work Monday through Thursday and remote work on Fridays. The role supports the RMF lifecycle for software deployed on government networks, including documentation, security control validation, security assessments, ATO tracking, and continuous monitoring.

Requirements

Five years of relevant experience with a bachelor’s degree in a related field; three years with a master’s degree in a related field; zero years with a Ph.D. or Juris Doctorate in a related field; or a high school diploma or equivalent and nine years of relevant experience.
Experience supporting RMF, cybersecurity compliance, or system accreditation activities for government systems.
Hands-on experience developing RMF artifacts and accreditation documentation, such as SSP, SAR, and POA&M.
Knowledge of NIST 800-53 security controls and federal cybersecurity standards.
Strong understanding of ATO processes for government networks.
Active CompTIA certification qualifying for DoD 8570/8140 IAM or IAT requirements, such as Security+, CASP+, or equivalent.
Active SECRET-level security clearance.

Responsibilities

Lead the RMF lifecycle for software being deployed on government networks.
Develop, review, and maintain accreditation documentation, including SSP, SAR, and POA&M.
Coordinate with system owners, developers, ISSOs, and government stakeholders to address security requirements.
Perform security control implementation, validation, and evidence collection.
Support security assessments and respond to findings.
Ensure compliance with NIST 800-53 and agency-specific cybersecurity directives.
Track progress toward ATO approval and support continuous monitoring.