Cybersecurity Engineer - DoD RMF & Authorization

Fuse Integration is seeking a Cybersecurity Engineer to lead DoD RMF execution and build/manage authorization packages for secure communications networks supporting U.S. defense agencies.

Responsibilities

• Lead and support execution of the Department of Defense (DoD) Risk Management Framework (RMF) across development, testing, authorization, and operational lifecycles.
• Develop, maintain, and manage complete RMF authorization packages supporting Authorizations to Operate (ATOs), Interim Authorizations to Test (IATTs), and ongoing authorization activities.
• Prepare and maintain System Security Plans (SSPs), security control implementation statements, Plans of Action and Milestones (POA&Ms), hardware and software inventories, system architecture documentation, and other required RMF artifacts.
• Manage RMF authorization packages within Enterprise Mission Assurance Support Service (eMASS), ensuring security control documentation, assessment evidence, and supporting artifacts remain accurate, complete, and current.
• Analyze and document security control implementations aligned to NIST SP 800-53, DoDI 8510.01, CNSSI 1253, applicable DISA Security Technical Implementation Guides (STIGs), and DoD cybersecurity policies.
• Coordinate with ISSMs, ISSOs, SCAs, Authorizing Officials (AOs), and government representatives to support assessments and authorization decisions.
• Evaluate system architectures, configurations, and operational environments to determine security control applicability, implementation approaches, and compliance requirements.
• Review and interpret vulnerability assessment results from ACAS, Nessus, SCAP, and STIG compliance assessments to identify deficiencies, document risks, and recommend remediation.
• Develop, maintain, and track POA&Ms, coordinating with engineering teams to resolve vulnerabilities, document mitigating factors, and support risk acceptance decisions.
• Support Security Control Assessment (SCA) activities by preparing assessment evidence, responding to findings, coordinating technical demonstrations, and resolving documentation gaps.
• Develop and execute continuous monitoring activities to maintain cybersecurity posture and authorization status of assigned information systems.
• Assess proposed modifications, software updates, and configuration changes to determine security control impacts, authorization boundary effects, and ATO/IATT condition changes.
• Partner with systems, software, and network engineers to ensure cybersecurity requirements are incorporated into system design, development, integration, and testing.
• Provide technical guidance on secure configurations, operating system hardening, network security, virtualization, and vulnerability remediation to support DoD cybersecurity requirements.

Requirements

• 6–8 years of professional experience in DoD cybersecurity, information assurance, systems administration, network engineering, or related technical disciplines.
• Demonstrated experience supporting DoD RMF authorization activities, including development and maintenance of ATO and/or IATT packages.
• Hands-on experience creating and maintaining RMF documentation, including SSPs, security control implementation statements, POA&Ms, and supporting assessment artifacts.
• Experience using eMASS to document security controls, manage authorization artifacts, track assessment findings, and maintain RMF packages.
• Strong working knowledge of NIST SP 800-53, DoD RMF requirements, and security control implementation and assessment methodologies.
• Experience interpreting DISA STIG requirements, vulnerability assessment results, and system security configurations to determine compliance and develop remediation recommendations.
• Experience reviewing system configurations, network architectures, and security control implementations to support accurate RMF documentation.
• Working knowledge of Linux and Windows, including administration, security hardening, access controls, and configuration management.
• Familiarity with virtualized environments such as VMware, KVM, or Hyper-V and related cybersecurity considerations.
• Understanding of networking fundamentals including TCP/IP, VLANs, subnets, firewalls, routing, network segmentation, and secure communications.
• Ability to analyze cybersecurity findings, document technical risks, and communicate remediation requirements to engineering teams and government stakeholders.
• Strong technical writing skills for clear, accurate, and technically defensible security documentation.
• Ability to independently manage multiple RMF deliverables, coordinate across engineering disciplines, and meet program authorization milestones.
• Ability to meet applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned work role.
• U.S. citizenship.
• Active Secret security clearance.

Technologies

• Linux, Windows
• VMware, KVM, Hyper-V
• eMASS
• ACAS, Nessus, SCAP
• STIGs
• TCP/IP, VLANs, firewalls
• POA&Ms, System Security Plans (SSPs)
• NIST SP 800-53
• DoDI 8510.01
• CNSSI 1253
• DISA Security Technical Implementation Guides (STIGs)
• DoD RMF, DoD 8140

Benefits

• Medical, Dental, and Vision
• Employee coverage is fully funded; a portion of dependents' coverage is funded as well
• 11 paid Federal Holidays
• Paid Time Off (PTO)
• 40 hours of paid sick leave per year
• 401k with employer matching
• Annual bonuses
• Cell phone reimbursement: $100/month

Preferred Qualifications

• Experience independently managing DoD RMF authorization packages from initial system categorization through authorization and continuous monitoring.
• Experience supporting successful ATO/IATT submissions, security assessments, and authorization package reviews.
• Familiarity with Navy, Marine Corps, or Air Force RMF authorization processes and service-specific requirements.
• Experience supporting cybersecurity accreditation of Research, Development, Test, and Evaluation (RDT&E) systems, developmental systems, or operational DoD capabilities.
• Experience coordinating directly with SCAs, AOs, government ISSMs, and other authorization stakeholders.
• Experience performing security control inheritance analysis, developing system authorization boundaries, and identifying applicable overlays and control tailoring requirements.
• Experience using ACAS, Nessus, SCAP, STIG Viewer, and other vulnerability assessment or compliance tools.
• Experience with technical implementation of DISA STIGs and security hardening of Linux, Windows, networking equipment, and virtualized environments.
• Familiarity with DoDI 8510.01, NIST SP 800-37, CNSSI 1253, and applicable DoD continuous monitoring guidance.
• Knowledge of Navy C4ISR systems, military networks, or tactical data links.
• Experience supporting cybersecurity requirements within Agile software development or systems engineering environments.
• Experience assessing cybersecurity risks associated with custom software, specialized hardware, or mission-specific system architectures.

Location: San Diego, CA (onsite)

Salary: USD 120,000 - 160,000 per yearly

Clearance: Active Secret