Nist 800 53a

Nist 800 53a Engineer Jobs

2 jobs found

Today

Sr IT Security Engineer

Govcio LLC San Antonio, TX

San Antonio, TX

Today

$140k - $160k/yr Full time Senior Cloud Platforms Data Security

Apply Now

Job Description

Govcio LLC is seeking a Sr IT Security Engineer to support the 16AF/AF IC Zero Trust initiative at Joint Base San Antonio, Lackland. This onsite role focuses on strengthening security controls, leading RMF activities, and advancing Zero Trust across both classified and unclassified environments.

Location and Work Setting

Location: San Antonio, TX
Work model: Onsite

Compensation

Estimated salary range: USD 140,000 - 160,000 per year

Key Responsibilities

Lead and support RMF activities, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Develop, tailor, document, and validate security controls and implementation statements aligned to NIST, DoD, Air Force, and Intelligence Community requirements.
Prepare and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, and authorization packages.
Advise program managers, system owners, ISSOs, ISSMs, engineers, and Authorizing Officials on cybersecurity risks and remediation strategies.
Assess cloud architectures and services for compliance across security, privacy, identity, logging, encryption, data protection, and boundary requirements.
Support Zero Trust implementation, including identity-centric access control, least privilege, device trust, segmentation, continuous verification, and data-centric security.
Conduct security control assessments, vulnerability reviews, configuration assessments, and continuous monitoring activities.
Coordinate remediation of findings and track risks through closure or formal risk acceptance.
Support security architecture reviews, system design assessments, and mission-impact analyses.
Create cybersecurity documentation, briefings, risk reports, and executive-level recommendations.

Required Qualifications

Clearance: TS/SCI
Education: High school diploma
Experience: 9+ years in cybersecurity, computer science, information systems, engineering, or a related discipline; and 8+ years in information security or cybersecurity engineering with significant federal, DoD, Air Force, or Intelligence Community work.
Maintain an active certification that meets DoD 8570 IAT III in lieu of DoD 8140 job code 633 System Security Engineer.
Understanding of systems security design and engineering principles.
Knowledge of cybersecurity and Zero Trust reference architectures.
Strong understanding of SIEM systems.
Strong understanding of security for cloud-based platforms and applications.
Excellent spoken and written communication skills.
Experience creating security workflows and diagrams based on system architecture.
Understanding of Model Based Systems Engineering and its correlation to cybersecurity.
Demonstrated experience executing RMF activities for moderate- or high-impact systems.
Strong working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and applicable DoD or Intelligence Community cybersecurity guidance.
Experience developing, tailoring, implementing, and assessing security controls.
Experience preparing authorization packages and working with system owners, ISSOs, ISSMs, security assessors, and Authorizing Officials.
Practical knowledge of cloud security architectures, including identity and access management, encryption, logging, network security, configuration management, and secure service deployment.
Knowledge of Zero Trust principles and architectures, including identity, device, application, network, and data protection.
Ability to analyze technical and operational risks and communicate findings to both technical and executive audiences.

Technologies and Standards

NIST SP 800-37
NIST SP 800-53
NIST SP 800-53A
DoD 8570 IAT III
DoD 8140 job code 633 System Security Engineer
SIEM systems

Preferred Skills and Experience

Experience supporting Air Force, Space Force, DoD, and/or Intelligence Community systems and mission applications.
Experience with classified environments, cross-domain solutions, high-side/low-side architectures, and compartmented or mission-partitioned systems.
Experience with FedRAMP, DoD Cloud Computing Security Requirements Guide, IL4/IL5/IL6 environments, or comparable cloud authorization processes.
Experience implementing Zero Trust using identity governance, privileged access management, micro segmentation, endpoint detection and response, security analytics, and continuous diagnostics.
Familiarity with CNSSI 1253, ICD 503, DoD RMF guidance, Air Force cybersecurity policy, and applicable Intelligence Community directives.
Experience with cloud platforms such as AWS, Microsoft Azure, or Google Cloud.
Experience with GRC and security tools such as eMASS, ServiceNow GRC, Archer, Tenable, ACAS, SCAP, Splunk, Microsoft Sentinel, or comparable platforms.
Experience performing security architecture reviews, threat modeling, attack-surface analysis, and control inheritance analysis.
Experience leading technical teams, mentoring junior security personnel, or briefing senior government stakeholders.

View full job page →

1d ago

Senior Principal Cyber Information Systems Security Engineer

SAIC Norfolk, VA

Norfolk, VA

1d ago

$160k - $200k/yr Full time Senior Cyber Security Information Security

Apply Now

Job Description

Lead Risk Management Framework (RMF) authorization efforts across unclassified and classified DoD environments as a senior principal ISSE technical authority.

Responsibilities

Act as Senior Principal ISSE and subject matter expert, leading development, management, and authorization of RMF packages for unclassified and classified environments supporting DoD enterprise IT and network modernization programs
Perform end-to-end RMF lifecycle activities in alignment with NIST 800-39, 800-37, 800-53, 800-53A, and 800-137 across multiple simultaneous systems
Categorize systems and information using FIPS 199 and NIST 800-60; select and tailor initial security control baselines based on FIPS 200 and NIST 800-53
Implement security controls using NIST Special Publication guidance (including 800-34, 800-64, 800-128); document implemented controls with specific and functional documentation
Assess security controls using NIST 800-53A to verify correct implementation, intended operation, and achievement of desired outcomes
Manage and maintain eMASS records for assigned systems; ensure RMF artifacts, POA&Ms, and authorization documentation remain accurate and complete across the system lifecycle
Drive RMF packages through full authorization workflows following Navy and DoD RMF processes; coordinate with Authorizing Officials (AOs), Information System Owners (ISOs), and Program Managers to achieve and maintain Authority to Operate (ATO)
Ensure continuous monitoring through NIST 800-137, 800-37, 800-53A, and related special publications; sustain ongoing ATO compliance
Collaborate with engineering teams to identify, document, and implement security controls across complex DoD enterprise IT and network infrastructure
Perform internal auditing activities supporting ISO/IEC 9000, 20000, and 27001; coordinate with external auditors to ensure actions align with industry standards
Conduct policy analysis to author or support enterprise cybersecurity policy aligned with DoD and Navy security requirements
Provide expert technical guidance and mentorship to junior cybersecurity team members on RMF processes, eMASS management, and ATO authorization workflows
Serve as organizational spokesperson and prime ISSE technical contact for significant cybersecurity authorization matters across program teams, engineering organizations, and government stakeholders
Support business development activities, including technical proposal development, capability demonstrations, and customer relationship management for program re-compete and growth opportunities

Requirements

Bachelor’s degree and 14+ years of related experience; or Master’s degree and 12+ years; or PhD or JD and 9+ years
10+ years of hands-on ISSE and RMF experience with demonstrated senior principal-level contributions in complex DoD program authorization environments
U.S. Citizen
Active Secret Clearance at start
Ability to obtain TS/SCI after start
DoD 8570/8140 IAM Level III or IAT Level III certification required (CISSP, CISM, or equivalent)
CompTIA Security+ CE required at minimum
Experience with RMF lifecycle management (NIST 800-37, 800-53, 800-53A, 800-137)
Experience with eMASS system management and ATO package development
Experience with FIPS 199 system categorization and security control selection
Experience with POA&M development, tracking, and remediation management
Experience with unclassified and classified system authorization workflows
DoD enterprise IT and network infrastructure security experience

Technologies

Risk Management Framework (RMF)
eMASS
NIST 800-39, NIST 800-37, NIST 800-53, NIST 800-53A, NIST 800-137
FIPS 199, NIST 800-60, FIPS 200
NIST 800-34, NIST 800-64, NIST 800-128
ISO/IEC 9000, ISO/IEC 20000, ISO/IEC 27001
NIST Special Publication guidance documents
POA&M

View full job page →

Nist 800 53a Engineer Jobs

Sr IT Security Engineer

Senior Principal Cyber Information Systems Security Engineer

Get Nist 800 53a Engineer Jobs alerts