> Markdown version of [/jobs/ext/2126451-cyber-rmf-ato-engineer](https://www.wearedevelopers.com/jobs/ext/2126451-cyber-rmf-ato-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber RMF/ATO Engineer

- **Company:** Integral Consulting Services
- **Location:** Tysons, VA, United States
- **Experience:** Expert
- **Salary:** $176,000.0 - $242,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Databases, Distributed Systems, Intrusion Detection and Prevention, Web Application Security, Security Information and Event Management, Software Vulnerability Management, Data Logging, Software Security, HybridCloud, Information Technology, Nessus, Servicenow, Vulnerability Analysis
- **Published:** August 19, 2026
- **Apply:** https://www.jofdav.com/jobs/59313211-cyber-rmf-ato-engineer

## About the Role

* Bachelor's Degree in computer science or IT related degree with 7-10 years' experience
 * Deep knowledge of RMF, NIST 80053, VA Handbook 6500 series, federal ATO processes, and VA cybersecurity standards.
 * Familiar with VA-approved security tools: Nessus, WASA, SCCD, Pen testing tools, ConMon/Ongoing Authorization, eMASS, or ServiceNow CAM
 * Experience with continuous monitoring, logging, SIEM tools, intrusion detection, and incident response
 * Working knowledge of networks, distributed systems, application security, and vulnerability scanning of infrastructure and software
 * Excellent documentation and auditreadiness skills
 * Public Trust

Preferred:

 * Experience with AWS VA Enterprise Cloud (VAEC)

## Description

The Cyber RMF/ATO Engineer is responsible for maintaining cybersecurity, RMF compliance, and ATO readiness for VA products and environments for the Department of Veterans Affairs (VA), Office of Information and Technology (OIT), Product Delivery Services (PDS), Benefits and Memorials (BAM), Memorial and Benefit Services (MBS) deliver secure, reliable, and effective Information Technology (IT) solutions that support the Department's mission., * Ensures continuous monitoring, vulnerability remediation, audit support, secure configuration management, and documentation required for Assessment & Authorization (A&A) and ongoing ATO sustainment

 * Maintain and continuously update ATO packages for all supported products and environments.
 * Facilitate VA Assessment & Authorization (A&A) processes and coordinate with Product teams, VA OIS, and external partners to ensure RMF compliance.
 * Ensure adherence to VA security policies, standards, federal law, and NIST SP 80037 Rev 2 guidelines.
 * Coordinate and execute required VA security scans including:
 * Nessus, Database Scans, Web Application Security Assessment (WASA), Security Configuration Compliance Data (SCCD), Threat Modeling, Penetration Tests, Continuous Monitoring (ConMon), and Ongoing Authorization (OA).
 * Upload and track scan results in eMASS or other VAapproved repositories.
 * Maintain, update, and manage the full suite of ATO documentation
 * Implement and maintain Continuous Monitoring and Operations Support CONOPS Plan.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)