Job Requirements
Bethesda, MD
Secret Polygraph not specified
Senior Level Career (10+ yrs experience)
$125,000 - $135,000
Job Description
Job Description
As the principal cybersecurity engineer and architectural lead, you will be responsible for executing a ground-up rewrite of the Agency's Office 365 Authorization to Operate (ATO) package. You will integrate Zero Trust Architecture principles in alignment with Task 3.2 of the Performance Work Statement (PWS).
Responsibilities
Execute a complete rewrite of the Agency's O365 ATO package, developing eMASS-ready Risk Management Framework (RMF) artifacts such as the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action and Milestones (POA&M) aligned with DoD Impact Level 4/5 standards.
Utilize Agentic Authoring tools like Google Gemini Workspace to accelerate the analysis of partner academic benchmarks and eMASS baselines, and draft NIST SP 800-53 control descriptions.
Formulate technical justifications for Controlled Unclassified Information (CUI) storage in non-GCC environments, identify compensating controls, and define remediation roadmaps for full GCC-High compliance.
Design, evaluate, and integrate Zero Trust security controls, Identity, Credential, and Access Management (ICAM), disk encryption (BitLocker/FileVault), and continuous monitoring across M365 IL5 tenant and endpoints.
Coordinate with Authorizing Official (AO), Security Control Assessor (SCA), and DISA technical representatives to ensure 100% ATO package acceptance.
Essential Skills
Active Secret Clearance.
DoD CSWF / 8570 certification: IASAE Level II or IAT Level III (e.g., CISSP, CASP+ / SecurityX, CSSLP, CISM).
Computing Environment (CE) & Vendor Certifications: Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft 365 Certified: Security Administrator Associate (SC-200 / MS-500), or Azure Security Engineer Associate (AZ-500).
7–10+ years of experience in cybersecurity engineering, RMF accreditation, eMASS package creation, NIST SP 800-53 security control mapping, and DoD cloud authorization.
Additional Skills and Qualifications
Master's or Bachelor's degree in Cybersecurity, Systems Engineering, Computer Science, or related discipline.
Work Environment: The position is a hybrid role based in Bethesda, Maryland, requiring the candidate to be local to the DMV area. While primarily remote, there may be a need to visit the USUHS Campus if issues arise.
Eligibility requirements apply to some benefits and may depend on your job
classification and length of employment. Benefits are subject to change and may be
subject to specific elections, plan, or program terms. If eligible, the benefits
available for this temporary role may include the following:
• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)
As the principal cybersecurity engineer and architectural lead, you will be responsible for executing a ground-up rewrite of the Agency's Office 365 Authorization to Operate (ATO) package. You will integrate Zero Trust Architecture principles in alignment with Task 3.2 of the Performance Work Statement (PWS).
Responsibilities
Execute a complete rewrite of the Agency's O365 ATO package, developing eMASS-ready Risk Management Framework (RMF) artifacts such as the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action and Milestones (POA&M) aligned with DoD Impact Level 4/5 standards.
Utilize Agentic Authoring tools like Google Gemini Workspace to accelerate the analysis of partner academic benchmarks and eMASS baselines, and draft NIST SP 800-53 control descriptions.
Formulate technical justifications for Controlled Unclassified Information (CUI) storage in non-GCC environments, identify compensating controls, and define remediation roadmaps for full GCC-High compliance.
Design, evaluate, and integrate Zero Trust security controls, Identity, Credential, and Access Management (ICAM), disk encryption (BitLocker/FileVault), and continuous monitoring across M365 IL5 tenant and endpoints.
Coordinate with Authorizing Official (AO), Security Control Assessor (SCA), and DISA technical representatives to ensure 100% ATO package acceptance.
Essential Skills
Active Secret Clearance.
DoD CSWF / 8570 certification: IASAE Level II or IAT Level III (e.g., CISSP, CASP+ / SecurityX, CSSLP, CISM).
Computing Environment (CE) & Vendor Certifications: Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft 365 Certified: Security Administrator Associate (SC-200 / MS-500), or Azure Security Engineer Associate (AZ-500).
7–10+ years of experience in cybersecurity engineering, RMF accreditation, eMASS package creation, NIST SP 800-53 security control mapping, and DoD cloud authorization.
Additional Skills and Qualifications
Master's or Bachelor's degree in Cybersecurity, Systems Engineering, Computer Science, or related discipline.
Work Environment: The position is a hybrid role based in Bethesda, Maryland, requiring the candidate to be local to the DMV area. While primarily remote, there may be a need to visit the USUHS Campus if issues arise.
Eligibility requirements apply to some benefits and may depend on your job
classification and length of employment. Benefits are subject to change and may be
subject to specific elections, plan, or program terms. If eligible, the benefits
available for this temporary role may include the following:
• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)
group id: 10105424
