Senior RMF Engineer

Paragon Cyber Solutions•Aberdeen Proving Ground, MD

9d•Onsite

About The Position

Paragon Cyber Solutions is seeking a Senior RMF Engineer to provide cybersecurity engineering and DoD Risk Management Framework (RMF) support to the U.S. Army Aberdeen Test Center (ATC). The position is on-site at Aberdeen Proving Ground, Maryland, with a small team, and supports obtaining and maintaining Authority to Operate (ATO) for ATC networks and test environments. Employment is full-time and contingent upon contract award. An active Secret clearance is required; Top Secret is preferred. As a small-business team member, you may help where needed and should be comfortable multitasking and adapting to a fast-paced, dynamic, growing business. Paragon describes its workplace as one where employees can grow, broaden their knowledge and experience, and make a difference.

Requirements

Active Secret clearance.
Active CompTIA SecurityX (formerly CASP+), CySA+, or CISSP certification.
Minimum 5 years of experience supporting DoD RMF lifecycle reporting and software/hardware reconciliation.
Experience managing networks across Windows, Linux, and Apple platforms in unclassified and classified environments, including Secret-level environments.
Working knowledge of DISA STIGs, NIST SP 800-53, and DoDI 8510.01.
Comfort with multitasking and working in a fast-paced, dynamic environment; adaptability to the needs of a growing business.

Nice To Haves

Active Top Secret clearance.
Experience with eMASS and ACAS.
Prior experience supporting Army test and evaluation, ATEC, or APG organizations.

Responsibilities

Perform RMF activities to obtain and maintain ATO for the ATC LAN, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network.
Support system categorization, boundary definition, and the selection, implementation, and assessment of security controls under NIST SP 800-53 and DoDI 8510.01.
Conduct verification and validation of security controls.
Support Security Control Assessor (SCA) visits and authorization activities.
Perform continuous monitoring, POA&M maintenance, and IAVM activities.
Conduct software and hardware reconciliation and maintain accurate system inventories.
Review proposed changes to hardware and software baselines and support configuration management and control boards.
Analyze and validate reported defects and incidents in the defect tracking system.
Support DISA STIG compliance across systems.