Infrastructure Engineer - Data Protection

The DARC Cyber Systems Engineer plays a key role in assessing, securing, and continuously monitoring complex systems and networks that directly support national security. In this role, you perform detailed cybersecurity assessments, develop and maintain Risk Management Framework (RMF) documentation, and help ensure systems meet stringent Department of Defense and federal cybersecurity requirements. You collaborate closely with engineering teams, program offices, and cybersecurity personnel to translate policy into effective technical controls, drive remediation of vulnerabilities, and support assessment and authorization activities across the program. Responsibilities

• Perform assessments of systems and networks to identify deviations from acceptable configurations, enclave policies, and local policies using passive evaluation tools such as STIG Viewer, SCAP, Evaluate-STIG, and STIG Manager.
• Author, update, and review security testing documentation, including security assessment plans, test cases, and cyber test methodologies to support continuous monitoring.
• Conduct annual security controls assessments and provide input for Security Assessment Reports (SAR) and Risk Assessment Reports (RAR).
• Collaborate with System Program Office (SPO) contractors and government personnel to support RMF Cybersecurity Engineers in updating systems records in eMASS.
• Coordinate, collect, prepare, and maintain RMF body-of-evidence documentation related to operational processes, procedures, and site-specific information.
• Prepare and update artifacts that support Assessment and Authorization activities, including Plan of Actions and Milestones (POA&M).
• Perform assessments of RMF artifacts and identify where they deviate from RMF control requirements, recommending corrective actions as needed.
• Assist in implementing government cybersecurity policy, such as NISPOM, NIST, DoD directives, and Air Force Instructions, by making recommendations on process tailoring, participating in process activities, and documenting results.
• Establish and maintain strict program control processes to mitigate risks and support system assessment and authorization, including compliance documentation, certification testing, analysis, coordination, and control of inspections and audits.
• Support investigations, software research, hardware introduction and release, and emerging technology research to ensure cybersecurity requirements are met.
• Perform analyses to validate established cybersecurity controls and requirements and recommend additional cybersecurity safeguards where appropriate.
• Coordinate across the program to address deficiencies identified during RMF assessment activities and track their remediation.
• Conduct vulnerability and compliance scans using Assured Compliance Assessment Solution (ACAS), Nessus, and tenable.sc, and analyze findings.
• Apply STIG hardening techniques to Linux and RHEL environments to improve system security posture.
• Create and maintain technical documentation and analysis reports using Microsoft Office tools.
• Support SIEM and log aggregation configurations and usage as needed to enhance monitoring and incident detection capabilities.
• Contribute to penetration testing and advanced assessment activities when aligned with program needs and personal certifications.
• Perform other cybersecurity engineering duties as assigned to support mission objectives and program requirements., Business Continuity Workflow Automation Time Off Management Software Development Technology Solutions Regulatory Compliance IT Service Management Operational Efficiency Functional Requirement SQL (Programming Language) Backup and Recovery System Software As A Service (SaaS) Infrastructure as Code (IaC) Troubleshooting (Problem Solving) +0, Process Improvement Business Operations Amazon Web Services Information Privacy Business Continuity Workflow Automation Time Off Management Software Development Regulatory Compliance IT Service Management Operational Efficiency Functional Requirement Infrastructure Management SQL (Programming Language) Backup and Recovery System Software As A Service (SaaS) Infrastructure as Code (IaC) Troubleshooting (Problem Solving) +0

Nessus Auditing Research Firewall NIST 800 Scripting Hardening Visionary Leadership Management Innovation Resilience Subnetwork Testability NIST 800-53 Coordinating Investigation Risk Analysis Cyber Security Problem Solving Microsoft Office Security Testing Secret Clearance Security Controls CompTIA Security+ Cyber Engineering Penetration Testing GIAC Certifications Security Engineering System Administration Emerging Technologies Compliance Assessments Technical Documentation GIAC Penetration Tester Cyber Security Policies Red Hat Enterprise Linux Vulnerability Assessments Risk Management Framework Cyber Security Assessment Engineering Design Process IAT Level II Certification Assessment And Authorization Plan Of Action And Milestones (POA&M) Department Of Defense (DoD) 8500 Series GIAC Web Application Penetration Tester Offensive Security Certified Professional GIAC Security Essentials Certification (GSEC) Security Information And Event Management (SIEM) Enterprise Mission Assurance Support Service (eMASS) Advanced Cardiovascular Life Support (ACLS) Certification Cisco Certified Network Associate Security (CCNA Security) National Industrial Security Program Operating Manual (NISPOM) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance), * Experience with the Risk Management Framework (RMF) Cybersecurity Lifecycle, including generating testable requirements, identifying resilient architecture designs, analyzing vulnerability findings, conducting verification testing of compliance assessments, and configuring, running, and scripting audit tools.

• Hands-on experience performing vulnerability and compliance scans using ACAS, Nessus, and tenable.sc.
• Proficiency with Security Technical Implementation Guides (STIGs) and STIG hardening of systems.
• Linux system administration experience, including configuration and security hardening (RHEL experience is highly relevant).
• Working knowledge of cybersecurity technologies and Department of Defense and federal cybersecurity policies such as DoDI 8500.01, NIST SP 800-53, and NIST SP 800-115.
• Technical documentation and analysis experience with strong proficiency in the Microsoft Office tool suite.
• Familiarity with POA&M development and management, and experience maintaining RMF artifacts and eMASS records.
• Ability to coordinate and maintain RMF body-of-evidence documentation and support Assessment and Authorization activities.
• Bachelors degree with 2 years of professional experience, or Masters degree with 0 years of professional experience for Level 2 roles.
• Bachelors degree with 5 years of professional experience, or Masters degree with 3 years of professional experience, or PhD with 1 year of professional experience for Level 3 roles.
• Current DoD 8570.01M IAT II certification such as Security+ CE, CCNA Security, GSEC, or SSCP.
• Active U.S. Government Secret security clearance at the time of application, current and within scope.
• Strong security engineering skills with the ability to validate cybersecurity controls and recommend safeguards.

Additional Skills & Qualifications

• Experience using or configuring SIEM and log aggregation software, including solutions such as ELK stack.
• Experience conducting cybersecurity assessments specifically in RHEL environments.
• Understanding of networking concepts including subnetting, firewalls, NAT, ACLs, and VLANs.
• Advanced experience with ACAS, Nessus, and tenable.sc, including complex configurations and analysis.
• Penetration testing-focused certifications such as OSCP, OSCE, GPEN, GWAPT, or GXPN.
• Active Top Secret security clearance.
• Experience working with tools such as STIG Viewer, SCAP, Evaluate-STIG, and STIG Manager.
• Familiarity with government cybersecurity policies and guidelines including NISPOM, NIST standards, DoD directives, and Air Force Instructions.
• Ability to collaborate effectively with cross-functional teams, including program offices, contractors, and government cybersecurity personnel.
• Strong analytical and problem-solving skills, with the ability to address complex, technically challenging cybersecurity issues.
• Capacity to obtain final clearances and program accesses within a reasonable period as determined by the organization., Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors., Tooling IBM DB2 Operations Automation Mentorship Resilience Scalability Emerging Risk Data Integrity Backup Devices Business Acumen Risk Management Microsoft Azure Motion Planning Active Directory Data Engineering Cyber Resilience Agile Methodology Cloud Technologies Scalability Design Process Improvement Business Operations, Linux Nessus Auditing Research Firewall NIST 800 Scripting Hardening Visionary Leadership Management Innovation Resilience Subnetwork Testability NIST 800-53 Coordinating Investigation Risk Analysis Cyber Security Problem Solving Microsoft Office Security Testing Secret Clearance Security Controls CompTIA Security+ Cyber Engineering Penetration Testing GIAC Certifications Security Engineering System Administration Emerging Technologies Compliance Assessments Technical Documentation GIAC Penetration Tester Cyber Security Policies Red Hat Enterprise Linux Vulnerability Assessments Risk Management Framework Cyber Security Assessment Engineering Design Process IAT Level II Certification Assessment And Authorization Plan Of Action And Milestones (POA&M) Department Of Defense (DoD) 8500 Series GIAC Web Application Penetration Tester Offensive Security Certified Professional GIAC Security Essentials Certification (GSEC) Security Information And Event Management (SIEM) Enterprise Mission Assurance Support Service (eMASS) Advanced Cardiovascular Life Support (ACLS) Certification Cisco Certified Network Associate Security (CCNA Security) National Industrial Security Program Operating Manual (NISPOM) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance), Tooling IBM DB2 Operations Automation Innovation Resilience Scalability End Systems Emerging Risk Data Integrity Backup Devices Business Acumen Risk Management Microsoft Azure Motion Planning Active Directory Data Engineering Cyber Resilience Agile Methodology Cloud Technologies Scalability Design

This is a full-time, Monday through Friday, onsite position located in a modern facility near the Colorado Springs Airport (COCO-1 building), with no on-base work required. The role is embedded in the DARC program, where mission-driven professionals tackle high-impact, technically complex challenges that operate at real-world, operational scale. You work closely with elite engineers, leaders, and mission partners in a collaborative environment that values innovation, rigorous problem-solving, and rapid transition from concept to deployment. The culture emphasizes meaningful purpose, accelerated professional growth, and long-term program stability, offering an opportunity to build a career around some of the most important work in national security. You use a range of cybersecurity tools and technologies, including RMF platforms such as eMASS, vulnerability assessment tools like ACAS, Nessus, and tenable.sc, STIG and compliance tools, SIEM and log aggregation solutions, and Linux/RHEL systems, all within a professional office setting. Job Type & Location

This is a Contract position based out of Colorado Springs, CO. Pay and Benefits

The pay range for this position is $140000.00 - $165000.00/hr.

Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service.