{"id":2262699,"url":"https://alion.io/job/leidos-rmf-engineer","title":"RMF Engineer","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":89,"open_postings":151,"ghost_share":0,"stale_share":0.636,"repost_share":0.02,"time_to_fill_p50_days":20,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Alexandria, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":87100,"max":157450,"currency":"USD","period":"year","gross":null,"usd_annual":157450},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-09T00:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-12T19:32:33Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Leidos is seeking experienced Risk Management Framework (RMF) Engineers to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC.\nThe RMF Engineer will support the development, maintenance, assessment, and authorization of cybersecurity packages for DHRA information systems. This position will work directly with system owners, cybersecurity personnel, and Government stakeholders to ensure authorization packages are complete, technically accurate, current, and positioned to move efficiently through the Department of Defense authorization process.\nWork Location: Mark Center, Alexandria, Virginia - 3 positions\nMission Environment\nDMDC operates a large and complex Department of Defense information environment supporting personnel, manpower, identity, readiness, entitlement, and other mission-critical data and applications. CyberPRIMES supports the cybersecurity governance and authorization activities required to operate these systems securely. RMF Engineers will work across multiple authorization boundaries and coordinate with system owners, Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), technical teams, assessors, and Government authorizing stakeholders. The objective is not simply to maintain compliance documentation. The RMF Engineer must understand the underlying system, evaluate how security controls are implemented, identify gaps that create authorization or mission risk, and help system owners move those issues to resolution.\nPrimary Tasks\nDevelop, review, and maintain complete and accurate Risk Management Framework authorization packages.\nReview and support development of System Security Plans (SSPs), system categorization, security-control selection, control implementation documentation, assessment results, authorization packages, and continuous-monitoring reports.\nMaintain RMF authorization schedules, trackers, repositories, workflows, accounts, tickets, and status information.\nMaintain and update authorization packages within the Enterprise Mission Assurance Support Service (eMASS).\nCoordinate with system owners, cybersecurity personnel, technical teams, and Government stakeholders to obtain required authorization artifacts and supporting evidence.\nIdentify missing artifacts, incomplete documentation, control-implementation gaps, and other issues that may delay authorization.\nProvide RMF and eMASS guidance to system owners and other program stakeholders.\nSupport Information System Security Manager and Information System Security Officer functions associated with system authorization and continuous monitoring.\nReview security-control implementation and supporting evidence for completeness, technical accuracy, and compliance with applicable requirements.\nSupport cybersecurity compliance reviews and authorization-status reporting.\nDevelop, review, and track Plan of Action and Milestones (POA&M) items through remediation and closure.\nTrack conditions associated with an Authorization to Operate (ATO) and coordinate required corrective actions.\nPerform quality assurance reviews of RMF submissions before Government review or assessment.\nSupport security-assessment planning, execution, documentation, and reporting.\nSupport continuous authorization and continuous-monitoring activities for authorized systems.\nAssess the impact of changes in Department of Defense cybersecurity policy or authorization requirements and assist system owners in transitioning to new requirements.\nPerform cybersecurity risk assessments and support security testing associated with system authorization.\nEvaluate system hardening, vulnerabilities, configuration issues, and other technical security conditions that affect authorization risk.\nSupport vulnerability and compliance remediation activities associated with RMF findings and Plan of Action and Milestones items.\nTroubleshoot cybersecurity compliance and authorization issues requiring coordination across system owners, engineers, administrators, cybersecurity teams, and Government stakeholders. Provide clear status, risk, and technical information to Government leadership regarding authorization progress, deficiencies, and actions required for resolution.\nBasic Qualifications\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline and 3 or more years of relevant professional experience.\nExperience supporting the Department of Defense Risk Management Framework or comparable Federal system authorization processes.\nExperience developing, reviewing, or maintaining cybersecurity authorization packages.\nExperience working with System Security Plans, security controls, assessment artifacts, Plans of Action and Milestones, or continuous-monitoring documentation.\nExperience assessing security-control implementation and supporting technical evidence.\nExperience identifying authorization-package deficiencies and coordinating corrective actions with system owners and technical teams.\nExperience supporting cybersecurity risk assessment, security testing, vulnerability analysis, system hardening, or compliance activities.\nStrong technical documentation, organizational, and analytical skills.\nAbility to manage multiple authorization activities, schedules, findings, and dependencies simultaneously.\nAbility to work effectively with system owners, engineers, cybersecurity personnel, assessors, and Government stakeholders.\nU.S. Citizenship required.\nActive Secret security clearance required.\nPreferred Qualifications\nExperience supporting Department of Defense system authorization and continuous-monitoring programs.\nHands-on experience with Enterprise Mission Assurance Support Service.\nExperience supporting Information System Security Manager or Information System Security Officer functions.\nExperience developing or reviewing System Security Plans and security-control implementation statements.\nExperience managing Plans of Action and Milestones and authorization conditions through closure.\nExperience supporting security-control assessments, authorization decisions, and continuous authorization.\nExperience assessing vulnerabilities, security configurations, and technical findings within an RMF authorization context.\nExperience performing quality assurance reviews of authorization packages before Government submission.\nExperience supporting multiple systems or authorization boundaries concurrently.\nFamiliarity with DHRA, DMDC, or comparable Department of Defense enterprise environments.\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nOctober 9, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $87,100.00 - $157,450.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":7794,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","C4ISR","Information Security","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-11T05:28:41Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.593,"p_room":1,"age_days":3,"expected_fill_days":20,"reasons":["conf:0","stale_co","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":157450,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-rmf-engineer","json_url":"https://alion.io/job/leidos-rmf-engineer.json","meta":{"generated_at":"2026-10-13T03:14:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4972,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-rmf-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-rmf-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-rmf-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-rmf-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-rmf-engineer"}]}