Cybersecurity Engineer / RMF Specialist
Posted 2
views
Summary
On-site Cybersecurity RMF Specialist in Columbus, OH supporting a federal customer's building and facility control systems — producing RMF documentation, security artifacts, and POA&Ms to help achieve and maintain ATO. Day-to-day work centers on NIST 800-53/800-82, FIPS 199/200, ACAS, SCAP, STIGs, and eMASS.
About Agile Defense
At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.
Job Title: Cybersecurity Engineer / RMF Specialist
Location: Columbus, OH | Onsite
Clearance Level: Must be a US Citizen with the ability to obtain & maintain a Secret security clearance
Certifications: Must meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE.
Job Description
We're looking for a Cybersecurity Risk Management Framework (RMF) Specialist to help a federal customer document, assess, and strengthen the security posture of their building and facility control systems. These systems keep the installation running — building automation, utilities, metering, and more — and your work directly supports the customer's path to achieving and maintaining their Authority to Operate (ATO).
This is a documentation and assessment focused role working as part of a small on site cyber team. You'll partner closely with the Cyber Systems Administrator who leads the team, as well as with the government's remote cybersecurity organization, system owners, and engineering staff. Your job is to gather the right information from the right people, turn it into clear and defensible RMF artifacts, and keep the paperwork accurate as the environment evolves. If you enjoy connecting the dots between what's running in the field and what the compliance framework requires, this role is for you.
JOB DUTIES AND RESPONSIBILITIES
- Develop and maintain RMF documentation and security artifacts, including system diagrams, categorization documents, control implementation write-ups, and plans of action.
- Collect, consolidate, and organize technical information from system owners, engineers, and operations staff into audit-ready deliverables.
- Support system categorization and risk assessment activities by preparing the supporting documentation and tracking input from stakeholders.
- Review vulnerability scan results and build out remediation plans (POA&Ms), tracking progress through to closure.
- Assist with STIG and security control checklists, documenting compliance status and exceptions.
- Maintain accurate inventories of hardware, software, and documentation in scope.
- Coordinate with the government's remote cybersecurity team, program managers, and security officers to ensure artifacts meet enterprise expectations.
- Contribute to monthly reporting and recurring customer deliverables on time and in the required format.
- Support phase in activities during ramp up, including capturing and validating documentation from the outgoing team.
Basic Qualifications
QUALIFICATIONS
Required Certifications
- Must meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE.
- Role-based computing environment certification (to be obtained before privileged access within 180 days of first day).
- Hands on experience supporting the RMF process in a federal, DoD, or similarly complex environment.
- Experience producing security documentation and artifacts that have been reviewed by a government ISSM, auditor, or authorizing official.
- Bachelor's degree is not required; candidates with equivalent experience, technical training, or industry certifications will be fully considered.
- Relevant experience may be gained through military service, technical roles in government or industry, or non-traditional career paths.
- Working knowledge of federal cybersecurity frameworks (FIPS 199/200, NIST 800-53, NIST 800-82, CNSSI 1253).
- Familiarity with DoD cybersecurity tools for vulnerability scanning and compliance checking (ACAS, SCAP, etc.) and the ability to interpret their output.
- Strong written communication — able to turn technical input from engineers and operators into clear, defensible documentation.
- Attention to detail and comfort managing multiple deliverables against overlapping deadlines.
- Ability to coordinate with program managers, remote cybersecurity stakeholders, security officers, engineers, and vendors to gather what's needed.
Education, Background, and Years of Experience
ADDITIONAL SKILLS & QUALIFICATIONS
Required Skills
Preferred Skills
- Experience uploading and maintaining artifacts in eMASS or a similar RMF package management system.
- Experience with OT/ICS/SCADA or facility related control systems (e.g., building automation, advanced metering).
- Knowledge of the Purdue Enterprise Reference Architecture.
- Experience supporting ATO or ATC efforts from start to finish.
- Familiarity with FedRAMP and Zero Trust principles.
- Experience with privacy documentation (PIA/PRiLA) or contingency plan artifacts.
- Prior DLA customer experience.
Our Core Values
Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together.
What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are.
- Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
- Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
- Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
- Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
- Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
- Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
Skills
As published by lever · 22 questions · 5 written answers
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company
Short answers (2)
- What is your full street address? (Street, City, State, Zip)
- What is your desired salary?
Pick from a list (14)
- Do you have a Department of Defense (DOD) Recognized Security Clearance?
- What level of DOD clearance do you have?
- Are you authorized to work in the United States?
- Will you now or in the future require sponsorship for employment visa status (e.g., H-1B visa status)?
- Are you open to relocating for this position, or another position with Agile Defense?
- Are you a current employee of Agile Defense or any of its subsidiaries, affiliates, or acquired companies?
- Have you ever been employed by Agile Defense or any of its subsidiaries, affiliates, or acquired companies?
- How did you hear about us?
- Do you have a higher education degree?
- What is your highest level of education?
- Do you have any active industry related certifications?
- Are you a current or former U.S. Government employee or U.S. armed forces?
- Are you currently subject to any post-employment obligations from a current or former employer that could restrict your ability to perform this role if hired?
- I certify that the information provided is accurate to the best of my knowledge and understand that additional details may be requested later in the hiring process.
Written answers (5)
- If you were referred, please list the referrer's name and any other details here: optional
- What active industry related certifications do you have?
- If yes, please briefly describe the type of obligation and its duration (you may exclude employer names and confidential terms). If no, please respond with "N/A".
- If hired, would you have any ongoing outside employment, consulting, or business activities that could conflict with this role or the company’s interests?
- If yes, please briefly describe. If no, please respond with "N/A".
Attachments (1)
- Please upload a copy of your certification(s) if applicable optional