RMF Engineer, Journeyman Security Clearance

Position: RMF Engineer, Journeyman with Security Clearance
Job Title:

RMF Engineer, Journeyman Job Category:
Security Time Type:
Full time Minimum Clearance Required to Start:
Secret Employee Type:
Regular-Long Term Assignment Percentage of

Travel Required:

Up to 10% Type of Travel:
Continental US *
*
* The Opportunity:

CACI is seeking an experienced RMF Engineer, Journeyman to support cybersecurity compliance and Risk Management Framework (RMF) implementation across the Indo-Pacific. The RMF Engineer, Journeyman serves as CACI's information security professional responsible for implementing, maintaining , and supporting the Department of Defense Risk Management Framework (RMF) for enterprise information systems, logistics platforms, operational technologies, and mission support applications. Reporting directly to the Cybersecurity Lead, this position ensures systems are designed, configured, and maintained in accordance with DoD cybersecurity policies while supporting secure mission execution across distributed and expeditionary environments.

The RMF Engineer works closely with Government stakeholders, information system owners, cybersecurity personnel, systems engineers, network engineers, software developers, logistics planners, and mission partners to support system authorization activities, security control implementation, vulnerability remediation, and continuous monitoring. This position contributes to successful program execution by maintaining cybersecurity compliance, reducing operational risk, and enabling secure information sharing throughout the Indo-Pacific theater.

Responsibilities:
* Support implementation of the DoD Risk Management Framework (RMF) lifecycle for information systems and mission applications.
* Develop and maintain RMF documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and authorization packages.
* Implement and validate NIST SP 800-53 security controls supporting system authorization and accreditation activities.
* Coordinate with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), Authorizing Officials (AOs), and system owners throughout the RMF process.
* Perform security control assessments, vulnerability reviews, configuration compliance checks, and cybersecurity risk analyses.
* Support vulnerability remediation efforts using security scanning tools and coordinate corrective actions with engineering and operations teams.
* Maintain continuous monitoring activities and track cybersecurity compliance metrics for Government leadership.
* Support system testing, security assessments, audits, inspections, and cybersecurity readiness reviews.
* Ensure compliance with DoD cybersecurity policies, RMF guidance, NIST standards, DISA Security Technical Implementation Guides (STIGs), and contractual requirements.
* Prepare cybersecurity reports, executive-level briefings, risk assessments, and technical recommendations.
* Support contingency operations, operational exercises, and technology deployments requiring secure system implementation.
* Maintain cybersecurity documentation, configuration baselines, security artifacts, and knowledge management repositories.
* Coordinate with network engineers, software developers, cloud administrators, and logistics personnel to integrate cybersecurity into operational systems.
* Promote continuous monitoring, cybersecurity awareness, and continuous process improvement across enterprise systems.
* Support geographically dispersed operations requiring secure and resilient information systems.

Qualifications:

Required:

* Minimum 5 years of experience supporting information security, cybersecurity engineering, RMF implementation, system security, or cybersecurity compliance for Government or Department of Defense programs.
* Experience supporting Department of Defense, Joint, Combatant Command, Service Component, Defense Information Systems Agency (DISA), or Special Operations organizations.
* Experience implementing RMF, preparing authorization packages, conducting security assessments, or supporting Authority to Operate (ATO) processes.
*…