Cybersecurity Engineer / RMF Specialist

Agile Defense is seeking a Cybersecurity Engineer / RMF Specialist to support a federal customer by documenting, assessing, and strengthening security posture of building and facility control systems through the RMF process to support ATO achievement and sustainment.

Responsibilities

• Develop and maintain RMF documentation and security artifacts, including system diagrams, categorization documents, control implementation write-ups, and plans of action
• Collect, consolidate, and organize technical inputs from system owners, engineers, and operations staff into audit-ready deliverables
• Support system categorization and risk assessment by preparing required documentation and tracking stakeholder inputs
• Review vulnerability scan results and produce remediation plans (POA&Ms), tracking items through to closure
• Assist with STIG and security control checklists by documenting compliance status and exceptions
• Maintain accurate inventories of in-scope hardware, software, and documentation
• Coordinate with the government remote cybersecurity team, program managers, and security officers to ensure artifacts meet enterprise expectations
• Provide monthly reporting and recurring customer deliverables on time and in the required format
• Support ramp-up phase activities, including capturing and validating documentation from the outgoing team

Requirements

• Meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE
• Complete role-based computing environment certification before privileged access, within 180 days of first day
• Hands-on experience supporting the RMF process in a federal, DoD, or similarly complex environment
• Experience producing security documentation and artifacts reviewed by a government ISSM, auditor, or authorizing official
• Bachelor’s degree not required; equivalent experience, technical training, or industry certifications considered
• Working knowledge of federal cybersecurity frameworks: FIPS 199/200, NIST 800-53, NIST 800-82, CNSSI 1253
• Familiarity with DoD tools for vulnerability scanning and compliance checking (e.g., ACAS, SCAP) and ability to interpret output
• Strong written communication to transform technical input into clear, defensible documentation
• Detail-oriented with the ability to manage multiple deliverables with overlapping deadlines
• Ability to coordinate with program managers, remote cybersecurity stakeholders, security officers, engineers, and vendors to gather required information
• US Citizen with ability to obtain and maintain a Secret security clearance

Technologies

• Cybersecurity Risk Management Framework (RMF)
• DoD 8140.03
• Security+ CE
• FIPS 199/200
• NIST 800-53, NIST 800-82
• CNSSI 1253
• ACAS, SCAP
• STIG
• eMASS
• Purdue Enterprise Reference Architecture
• FedRAMP
• Zero Trust
• PIA/PRiLA

Preferred Skills

• Experience uploading and maintaining artifacts in eMASS or a similar RMF package management system
• Experience supporting OT/ICS/SCADA or facility related control systems (e.g., building automation, advanced metering)
• Knowledge of the Purdue Enterprise Reference Architecture
• Experience supporting ATO or ATC efforts from start to finish
• Familiarity with FedRAMP and Zero Trust principles
• Experience with privacy documentation (PIA/PRiLA) or contingency plan artifacts
• Prior DLA customer experience

Location

Columbus, OH | Onsite