Senior Security Risk Management Framework Engineer

📋 Description

• Assess VA.gov Platform compliance with the 18 Critical Controls identified by VA and help establish
• Perform security reviews, gap analyses, and risk assessments across VA.gov Platform infrastructure
• Support ongoing ATO and cATO readiness for the VA.gov Platform authorization boundary.
• Develop, update, and maintain RMF and authorization artifacts, including System Security Plans
• Evaluate identified control deficiencies and work with DevSecOps engineers to translate them into
• Validate completed engineering remediation against applicable security-control requirements and

🎯 Requirements

• Associate’s degree + four years of relevant professional experience OR Bachelor’s degree + two
• Strong experience with NIST Risk Management Framework (RMF) and NIST 800-53 security controls.
• Experience supporting ATOs for complex information systems.
• Experience performing security control assessments, gap analyses, risk assessments, and remediation
• Experience developing and maintaining SSPs, control narratives, POA&Ms, and security
• Ability to understand cloud infrastructure, CI/CD pipelines, application architectures, and modern

🎁 Benefits

• The opportunity to support high visibility federal missions in IT and healthcare
• A culture that values innovation, growth, collaboration, and quality
• Access to cutting-edge tools and technologies
• Comprehensive benefits for you and your family
• A career path that rewards ambition and performance