Senior RMF & ATO Engineer

Job Summary

To support a mission-critical cloud-native platform within the Department of Veterans Affairs, the remote Senior RMF & ATO Engineer will serve as the technical cybersecurity lead, responsible for implementing and maintaining the Risk Management Framework (RMF) and Authorization to Operate (ATO) processes while collaborating with cross-functional teams to ensure security throughout the system lifecycle.

Key responsibilities

• Implement security controls required throughout the NIST RMF lifecycle
• Engineer technical solutions supporting various RMF activities including assessment and authorization
• Integrate security automation into CI/CD pipelines and develop necessary security documentation

Required qualifications

• Experience with NIST RMF and ATO processes
• Proficiency in cloud security practices, particularly with AWS and Kubernetes
• Strong background in security automation tools and CI/CD integration
• Ability to develop and maintain security documentation such as SSPs and Security Assessment Reports
• Experience mentoring junior engineers in RMF implementation and cloud security best practices