Principal Cyber RMF Engineer

Job ID: 2614734

Location: Remote Work, CA, US

Date Posted: 2026-07-20

Category: Cyber

Subcategory: Cyber Engineer

Schedule: Full-Time

Shift: Day Job

Travel: Yes - 10% of the time

Minimum Clearance Required: Secret

Clearance Level Must Be Able to Obtain: TS/SCI

Potential for Remote Work: ORA_REMOTE

Description

Make a meaningful impact on national security by supporting the Space Development Agency (SDA) in delivering the Battle Management Command, Control, and Communications (BMC3) software development and hosting environment for the National Defense Space Architecture (NDSA). These systems accelerate the secure development, testing, and deployment of mission critical space applications that enable Joint All Domain Command and Control (JADC2).

Key Responsibilities:

RMF Process Implementation

• Lead the end-to-end RMF lifecycle for DoD IT systems, including categorization, control selection, implementation, assessment, and monitoring.
• Conduct and oversee system security risk assessments and recommend strategies to mitigate risks effectively.
• Develop, review, and maintain security documentation such as System Security Plans (SSPs), Security Assessment Reports (SARs), and Risk Assessment Reports (RARs).
• Serve as the Information System Security Officer (ISSO) or provide subject matter expertise to ISSOs.

Compliance and Policy Adherence:

• Ensure compliance with DoD 8500.01, 8570.01, NIST 800-53, and other applicable cybersecurity regulations and standards.
• Provide guidance for achieving and maintaining Authority to Operate (ATO) and addressing Plan of Action and Milestones (POA&M) items.

Audit and Assessment:

• Conduct security audits and vulnerability assessments, utilizing industry-standard tools to identify and mitigate risks.
  Facilitate independent verification and validation (IV&V) activities to ensure thorough system testing.
• Collaboration and Stakeholder Engagement:
• Collaborate with stakeholders, including system owners, process owners, and leadership, to ensure compliance with RMF requirements.
• Provide cybersecurity training, awareness, and mentorship to team members and stakeholders.

Incident Response & Continuous Monitoring:

• Support the development and execution of incident response protocols.
• Establish and maintain continuous monitoring initiatives to detect and address emerging threats.

Qualifications

Required Skills and Qualifications:

• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (equivalent experience may be considered).
• Certifications: Must have a DoD 8570.01 certification at IAM Level II or III (e.g., CISSP, CISM, CAP, CISA, CASP+ CE, GSLC).
• Experience: Minimum 9 of experience in cybersecurity, with at least 3 years of hands-on RMF implementation and oversight for a DoD system.
• Clearance: Active Secret Clearance required at the time of hire; ability to obtain Top Secret/SCI may be preferred.

Technical Proficiency:

• Extensive experience with security tools (e.g., ACAS, eMASS, STIG/SRGs).
• Strong knowledge of cloud, system administration, and vulnerability analysis.
• Expertise in applying NIST 800-53 security controls to federal systems and addressing weaknesses.
• Strong analytical, problem-solving, and organizational skills.
• Excellent verbal and written communication skills

Preferred Qualifications:

• Master's degree in a related field.
• Knowledge of cloud technologies and their associated cybersecurity risks.
• Familiarity with A&A tools and platforms used by the DoD for RMF processes.

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.


SAIC is a premier technology integrator providing full life cycle services and solutions in the technical, engineering, intelligence, and enterprise information technology markets. SAIC is Redefining Ingenuity through its deep customer and domain knowledge to enable the delivery of systems engineering and integration offerings for large, complex projects. SAIC's approximately 15,000 employees are driven by integrity and mission focus to serve customers in the U.S. federal government. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $4.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see .