Senior RMF & ATO Engineer

To support a mission-critical cloud-native platform within the Department of Veterans Affairs, the remote Senior RMF & ATO Engineer will serve as the technical cybersecurity lead, responsible for implementing and maintaining the Risk Management Framework (RMF) and Authorization to Operate (ATO) processes while collaborating with cross-functional teams to ensure security throughout the system lifecycle. Key responsibilities Implement security controls required throughout the NIST RMF lifecycle Engineer technical solutions supporting various RMF activities including assessment and authorization Integrate security automation into CI/CD pipelines and develop necessary security documentation Required qualifications Experience with NIST RMF and ATO processes Proficiency in cloud security practices, particularly with AWS and Kubernetes Strong background in security automation tools and CI/CD integration Ability to develop and maintain security documentation such as SSPs and Security Assessment Reports Experience mentoring junior engineers in RMF implementation and cloud security best practices