Engineer I at CSA Global LLC

Arlington, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

11 Oct, 26

Salary

0.0

Posted On

14 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risk Management Framework, Cybersecurity Engineering, Vulnerability Management, System Integration, Data Integration, eMASS, DISA STIGs, Security Requirements Guides, Assessment and Authorization, Secure System Architecture, Incident Response, Compliance Tracking, DoD 8140, Network Hardening, Audit Readiness, Technical Documentation

Industry

IT Services and IT Consulting

Description

Description Client Solution Architects (CSA) is currently seeking an Engineer I to support onsite in the Arlington, VA area. For nearly 50 years, CSA has delivered integrated technology and operational support services to meet the defense and federal sector's most complex enterprise needs. Working from operations centers and shipyards to training sites and program offices, CSA deploys experienced teams, innovative tools and proven processes to advance federal missions. This position is contingent upon contract award. Onsite/Hybrid/Remote work schedules subject to change based on contract requirements. How Role will make an impact: Execute all phases of the Risk Management Framework (RMF) to support system categorization, control selection, implementation, assessment, authorization, and continuous monitoring. Prepare, review, and maintain Assessment and Authorization (A&A) packages to achieve and sustain Authority to Operate (ATO) for Navy information systems and networks. Manage RMF package workflows within the Enterprise Mission Assurance Support Service (eMASS), tracking package status through the Navy Authorizing Official (NAO), Security Control Assessor (SCA), and Validator review queues. Conduct enterprise vulnerability management activities, including scanning, analysis, remediation tracking, and reporting to reduce risk exposure across assigned systems. Apply Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) to harden operating systems, applications, and network devices in accordance with DISA standards. Provide cybersecurity engineering support for the design, integration, configuration, testing, and deployment of secure system architectures. Support system integration and data integration efforts to ensure secure, interoperable connectivity across enterprise environments. Enforce cybersecurity policy compliance and prepare supporting documentation for command inspections, audits, and reviews, including CCRI, CORA, and CSI assessments. Support incident response and electronic spillage management activities in coordination with government leads. Maintain accurate system configuration documentation, architectural artifacts, and control implementation records. Collaborate with government personnel and contractor teammates to advance audit readiness and sustain a defensible cybersecurity baseline. Develop and maintain Cyber Workforce (CWF) compliance tracking products aligned to DoD 8140 work roles, and support enterprise cybersecurity performance dashboards providing visibility into RMF, ATO, and POA&M status. Requirements What you’ll need to have to join our award-winning team: Clearance: Must possess and maintain an active Secret Clearance Five years of experience in one or more of the following areas: Enterprise Architecture Cybersecurity and Risk Management Framework (RMF) System Integration Data Integration Environments Demonstrated working knowledge of DoD and DON cybersecurity requirements, policies, and technical directives. What Sets you apart: CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, Systems Security Certified Practitioner (SSCP), or an equivalent industry certification. DoD 8140 and Cyber Workforce (CWF)-aligned certifications appropriate to the assigned work role. Working proficiency with the Risk Management Framework (RMF) and the associated ATO lifecycle. Familiarity with eMASS for package development, workflow management, and status tracking. Experience applying DISA STIGs and SRGs, and using automated compliance tools such as STIG Manager and Evaluate-STIG. Knowledge of enterprise vulnerability scanning tools and remediation methodologies. Understanding of secure network and system architecture, including integration across cloud and DoD-owned environments. Strong analytical, documentation, and communication skills suitable for a formal defense contracting setting. Ability to work both independently and within cross-functional teams to meet mission-critical deadlines. Physical Requirements: While performing the duties of this job, the employee is regularly required to: Sit for extended periods of time and work at a computer workstation Use hands and fingers to operate keyboards, mice, and other input devices Communicate effectively, both verbally and in writing Specific vision abilities required may include close vision, distance vision, depth perception, and the ability to adjust Stand, walk, bend, or reach; Access equipment located in data centers, offices, or under desks Lift and/or move equipment weighing up to 25 pounds Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions, in accordance with the Americans with Disabilities Act (ADA).

Responsibilities

Execute all phases of the Risk Management Framework to achieve and sustain Authority to Operate for Navy information systems. Provide cybersecurity engineering support including vulnerability management, system hardening via STIGs, and secure architecture deployment.