Cyber RMF/ATO Engineer

About the role

Integral partners with federal defense, intelligence, and civilian leaders to tackle their most important challenges and deliver secure, reliable, and effective Information Technology (IT) solutions that support the Department of Veterans Affairs (VA) mission. This role ensures cybersecurity, RMF compliance, and ATO readiness for VA products and environments within the VA Office of Information and Technology (OIT), Product Delivery Services (PDS), Benefits and Memorials (BAM), and Memorial and Benefit Services (MBS).

Responsibilities

• Maintain and continuously update ATO packages for all supported products and environments.
• Facilitate VA Assessment & Authorization (A&A) processes and coordinate with Product teams, VA OIS, and external partners to ensure RMF compliance.
• Ensure adherence to VA security policies, standards, federal law, and NIST SP 800-37 Rev 2 guidelines.
• Coordinate and execute required VA security scans including Nessus, Database Scans, Web Application Security Assessment (WASA), Security Configuration Compliance Data (SCCD), Threat Modeling, Penetration Tests, Continuous Monitoring (ConMon), and Ongoing Authorization (OA).
• Upload and track scan results in eMASS or other VA-approved repositories.
• Maintain, update, and manage the full suite of ATO documentation.
• Implement and maintain Continuous Monitoring and Operations Support CONOPS Plan.

Requirements

• Bachelor’s Degree in computer science or IT-related field.
• 7-10 years of relevant experience.
• Deep knowledge of RMF, NIST 800-53, VA Handbook 6500 series, federal ATO processes, and VA cybersecurity standards.
• Familiarity with VA-approved security tools such as Nessus, WASA, SCCD, Penetration Testing tools, ConMon/Ongoing Authorization, eMASS, or ServiceNow CAM.
• Experience with continuous monitoring, logging, SIEM tools, intrusion detection, and incident response.
• Working knowledge of networks, distributed systems, application security, and vulnerability scanning of infrastructure and software.
• Excellent documentation and audit-readiness skills.

Preferred Qualifications

• Public Trust clearance.
• Experience with AWS VA Enterprise Cloud (VAEC).

Benefits

• Comprehensive medical, dental, and vision insurance.
• Flexible Spending Accounts.
• Short-Term and Long-Term Disability Insurance.
• Life Insurance.
• Paid Time Off & Holidays.
• Paid parental leave.
• Immediate vesting in 401(k).
• Earned Bonuses & Awards.
• Professional Training Reimbursement.
• Employee Assistance Program.