Sr Information Assurance Engineer

IntrepidGS•McLean, VA

102d

About The Position

The Senior Information Assurance Engineer serves as the subject matter expert for cybersecurity compliance, governance, and risk management across Army IMCOM-E and DoD information systems. This role provides leadership in the application of the DoD Risk Management Framework (RMF), supports Command Cyber Readiness Inspections (CCRI), and manages system assessment and authorization (A&A) activities within Enterprise Mission Assurance Support Service (eMASS). The engineer ensures that all systems under IMCOM authority maintain cybersecurity posture in alignment with Federal, DoD, and Army information assurance policies, directives, and operational requirements.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
Minimum 8–10 years of Information Assurance engineering experience supporting DoD environments.
Demonstrated expertise with: DoD RMF lifecycle implementation CCRI processes and compliance scoring eMASS workflow and security documentation
Strong working knowledge of DoD cybersecurity directives, NIST 800-series publications, and Army-specific policies.
IAT II Compliant
Capability to identify, assess, and mitigate cyber risks impacting confidentiality, integrity, and availability of Army information systems.
Strong communication and technical writing skills for senior leader and accreditation audiences.
Active Secret required

Responsibilities

Lead cybersecurity governance and compliance activities across Army and IMCOM systems.
Apply DoD RMF processes to categorize, assess, authorize, and continuously monitor information systems.
Prepare, upload, and manage cybersecurity documentation within eMASS, ensuring accuracy and audit readiness.
Support and lead CCRI preparations, remediation efforts, and response actions to maintain cyber readiness scoring.
Interpret and enforce Federal (NIST), DoD, and Army cybersecurity policies, including DoDI 8510.01, AR 25-series, and associated guidance.
Provide risk analysis and recommendations to Command leadership, ISSMs, and system owners for cyber posture improvements.
Conduct vulnerability assessments, track POA&Ms, and validate remediation actions to ensure compliance with security controls.
Develop IA policies, standard operating procedures, and security architecture/design artifacts to support accreditation activities.
Coordinate with system stakeholders, cybersecurity service providers (CSSPs), and external assessors to resolve security gaps.
Ensure continuous monitoring, logs review, and reporting are performed in alignment with RMF Step 6 requirements.
Represent IMCOM cybersecurity interests during planning sessions, system design changes, configuration control boards, and audits.
Maintain current knowledge of emerging cyber threats, mitigation technologies, and compliance mandates impacting Army systems.