Cybersecurity Engineer III

Cybersecurity Engineer III

Wichita Tribal Service, a Quivera Enterprises company, is seeking an experienced Cybersecurity Engineer III to support the implementation, assessment, and continuous improvement of enterprise cybersecurity and information assurance programs within a Federal civilian agency environment. This senior-level position serves as a technical cybersecurity expert responsible for implementing the NIST Risk Management Framework (RMF), ensuring Federal Information Systems Modernization Act (FISMA) compliance, and supporting ongoing authorization and continuous monitoring activities for enterprise information systems.

The Cybersecurity Engineer III works closely with Information System Security Officers (ISSOs), system owners, architects, engineers, and Federal stakeholders to develop secure solutions, maintain authorization documentation, conduct security assessments, and implement cybersecurity best practices across traditional and cloud-hosted environments. The ideal candidate possesses extensive knowledge of federal cybersecurity policies, NIST standards, governance, risk, and compliance (GRC) tools, and information system security engineering principles.

This position offers the opportunity to support mission-critical federal programs while working alongside experienced cybersecurity professionals in a collaborative and rapidly growing organization. High-performing employees who consistently demonstrate exceptional results, leadership, and initiative will find significant opportunities for accelerated career growth and advancement.

Essential Duties and Responsibilities

• Support implementation and maintenance of agency cybersecurity programs in accordance with FISMA, NIST guidance, and Federal security requirements.
• Apply the NIST SP 800-37 Risk Management Framework (RMF) throughout the system development lifecycle.
• Develop, maintain, and update system authorization documentation including:
• System Security Plans (SSPs)
• Privacy Plans
• Contingency Plans
• Incident Response Plans
• Configuration Management Plans
• Security Assessment Reports
• Plans of Action and Milestones (POA&Ms)
• Conduct continuous monitoring activities to ensure security controls remain effective and compliant.
• Evaluate security controls in accordance with NIST SP 800-53 and document implementation evidence.
• Assist with Authorization to Operate (ATO), Authority to Test (ATT), and continuous authorization activities.
• Develop cybersecurity implementation guidance based on evolving Federal cybersecurity policies and standards.
• Interpret Federal cybersecurity directives and translate requirements into practical implementation guidance.
• Support security assessments, audits, vulnerability remediation, and corrective action activities.
• Maintain security documentation using Xacta 360 Governance, Risk, and Compliance (GRC).
• Collaborate with ISSOs, system administrators, engineers, and business stakeholders to implement secure architectures.
• Participate in configuration management activities supporting secure system baselines.
• Assist with cloud security implementation utilizing RMF guidance for cloud-hosted systems.
• Support Privacy Impact Assessments (PIAs) and protection of Personally Identifiable Information (PII).
• Develop cybersecurity policies, procedures, standards, work instructions, and technical guidance.
• Provide cybersecurity recommendations during system design, modernization, and implementation efforts.
• Support incident response activities and cybersecurity compliance reporting.
• Participate in security awareness initiatives and cybersecurity training activities.
• Coordinate with Federal and interagency teams to ensure compliance with government security requirements.
• Provide technical consultation and mentoring to junior cybersecurity staff when appropriate.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, Engineering, or a related field.
• Minimum 7 years of progressively responsible cybersecurity, information assurance, or information system security experience supporting Federal information systems.
• Demonstrated experience implementing FISMA requirements.
• Extensive knowledge of the NIST Risk Management Framework (RMF).
• Experience interpreting and implementing NIST SP 800-37 guidance.
• Strong understanding of NIST SP 800-53 security controls and assessment processes.
• Experience developing and maintaining Federal cybersecurity documentation.
• Experience conducting continuous monitoring activities for authorized systems.
• Experience managing and tracking POA&M activities.
• Knowledge of Federal privacy requirements including:
• Privacy Impact Assessments (PIAs)
• Personally Identifiable Information (PII)
• Experience serving as an Information System Security Officer (ISSO) or performing equivalent responsibilities.
• Experience implementing RMF requirements for cloud-hosted information systems.
• Experience using Xacta 360 Governance, Risk, and Compliance (GRC) platform.
• Excellent written, verbal, presentation, and interpersonal communication skills.
• Ability to interpret complex Federal cybersecurity policies and communicate technical concepts to diverse audiences.
• Ability to work independently while managing multiple priorities within a Federal environment.

Preferred Qualifications

• Experience supporting the U.S. Department of the Interior, Bureau of Reclamation, or other civilian Federal agencies.
• Experience supporting Operational Technology (OT) environments.
• Knowledge of Industrial Control Systems (ICS) cybersecurity.
• Experience supporting Geographic Information Systems (GIS).
• Familiarity with cloud security architectures including Microsoft Azure or AWS Government environments.
• Experience supporting cybersecurity audits, Inspector General reviews, or Federal compliance assessments.
• Experience mentoring junior cybersecurity personnel.

Preferred Certifications

• One or more of the following certifications is highly desirable:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Access Specialist (CASp)
• Additional DoD 8570/8140 or cybersecurity certifications are a plus.

Core Competencies

• Federal Cybersecurity Compliance
• Risk Management Framework (RMF)
• FISMA Compliance
• Information Assurance
• Security Control Assessments
• Continuous Monitoring
• Cloud Security
• Governance, Risk & Compliance (GRC)
• Policy Development
• Security Documentation
• Incident Response
• Privacy Compliance
• Communication & Collaboration
• Analytical Thinking
• Problem Solving
• Attention to Detail

Physical Demands – IT Office/Technical Role

The physical demands described here are representative of those that must be met by an employee, with or without reasonable accommodation.

This role is primarily office-based and requires prolonged computer use, including sitting, typing, and operating standard office equipment. Occasional walking, standing, bending, and reaching may be required to support equipment setup and troubleshooting. The employee must be able to lift up to 15 pounds, with occasional heavier lifting.

The employee must be able to communicate effectively and maintain visual acuity (close, distance, color, and depth perception). Occasional travel and extended hours may be required to support operational needs and project deadlines.

Work Environment

This position is performed primarily in a professional office or government facility supporting Federal information systems. Work may involve collaboration with Federal personnel, contractors, and cross-functional technical teams. Limited travel may be required to support meetings, security assessments, training, or project implementation activities.

Equal Employment Opportunity

Quivera Enterprises, LLC is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected status under applicable federal, state, or local law.

As a tribally owned organization, Quivera Enterprises may apply Indian Employment Preference where authorized by applicable law, regulation, or contract.