> Markdown version of [/jobs/ext/4605796-principal-cybersecurity-engineer-rmf-accreditation](https://www.wearedevelopers.com/jobs/ext/4605796-principal-cybersecurity-engineer-rmf-accreditation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Cybersecurity Engineer (RMF & Accreditation)

- **Company:** Job Owl
- **Location:** Columbia, MD, United States
- **Salary:** $165,000.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Software System Penetration Testing, Systems Engineering, Cyber Security, Data Security, Linux, Identity and Access Management, Internet Security, Open Source Technology, Remote Infrastructure Management, Security Content Automation Protocol, Software Engineering, Verification and Validation (Software), Cyber Threat Analysis, Selinux, Information Technology, Plan of Action and Milestones
- **Published:** November 6, 2026
- **Apply:** https://www.careerbuilder.com/job-details/principal-cybersecurity-engineer-rmf-accreditation-md--7037999a-367e-4683-9f16-a0b64a9ba2ca

## About the Role

Internet Security, Operating Systems, Internet Security, Security Attacks, Government, Computer Security, Information/Data Security (InfoSec), U.S. National Institute of Standards and Technology (NIST), International Classification of Diseases (ICD), Traceability, * Education

 + Bachelor's Degree in System Engineering, Electrical Engineering, Computer Science, or a computer/software engineering related field.
 * Experience
 + Minimum of 15+ years of experience in RMF Security Engineering
 * Knowledge, Skills & Abilities
 + Ability to understand, interpret and make recommendations based on relevant publications (e.g., NIST 800-53, ICD-503 and DoD 8510.01)
 + Requirement Definition and Analysis, System Security Architecture
 + NCDSMO standards and guidance documents regarding CDS architecture, design, development, engineering, implementation, system security, local and remote management and monitoring, and filtering.
 + Leadership experience in utilizing Risk Management Framework to drive the end-to-end accreditation process including negotiating with the Authorizing Official (AO) to achieve an Authorization to Operate (ATO)
 + Linux Operating Systems including open-source distributions, SELinux policy and embedded systems
 + Security Technical Implementation Guide development and modification, and STIG remediation
 + SCAP/OVAL and ACAS scanning and thorough understanding of the framework
 + Previous Common Criteria
 + Trusted Computing
 + Penetration testing
 + Test and Evaluation (T&E) and Independent Verification and Validation (IV&V)
 * Additional Competencies/Requirements
 + Candidates must hold current TS/SCI clearance.
 + Required Certifications: DoD 8570 IAT/IAM Level III certification
 + Familiarity with XACTA/TSABI process for the IC and the SABI process for DOD.
 + Candidates must be able to commute regularly (M-F) to customer sites in the local area.
 + Ability to travel outside of the local area, up to 30% annually, is required.

## Description

The Principal Cybersecurity Engineer will create, and tailor Security Control Traceability Matrices (SCTM) based on the Risk Management Framework (RMF) guidance, NIST 800-53, ICD 503, and CNSSI 1253. Exposure to Cross Domain Solution (CDS) accreditation and the National Cross Domain Strategy and Management Office (NCDSMO) Raise the Bar (RTB) initiative is required. Experience creating artifacts supporting the RMF accreditation process is required.
Essential Duties and Responsibilities:

 * Serves as the primary technical liaison for Accreditation activities, leading and conducting Accreditation-related briefings for government ISSMs and senior customer stakeholders. Prepare support briefings for ATO packages statuses
 * Facilitate XACTA and eMass data entry at Owl customer sites by creating Authorization to Operate packages for Authorization Official approval to include:
 + CONOPS
 + SSTP
 + SSP
 + POA&M
 + Self-Assessment Plan
 + Cyber Threat Security Plan
 + SCTM
 * Facilitate the ATO process on-site with Owl customers
 * Interface with Cross Domain engineers to document security control responses within required documentation