What are the responsibilities and job description for the Senior Cybersecurity Internal Controls Engineer (RMF/eMASS) position at IPTA?
Radford, VA
At IPT Associates (IPTA), we enjoy solving real-world problems with technology. We work closely with our customers, teammates, experts, and partners to come up with practical solutions that make a difference. Whether it's a government or business organization, we focus on understanding the need and building something that works.
Our Team
At IPTA, everything starts with our people. We're big believers that when you invest in your team, great things happen. That's why we encourage learning, growth, and trying new things-even if you don't have all the answers yet.
Our culture is rooted in fierce determination, fearless integrity, and passionate service-but we also like to keep things collaborative, supportive, and down-to-earth.
We're Looking For People Who
Position Summary: You will provide full cybersecurity internal controls and Risk Management Framework (RMF) support under DoDI 8500.01 and DoDI 8510.01, including enterprise eMASS and RMF services.
Key Responsibilities
Certifications: CISSP or equivalent.
IPTA is an Equal Opportunity Employer. All employment decisions are based on individual merit, including qualifications, experience, performance, and business needs, consistent with applicable federal laws and federal contracting requirements. IPTA provides equal opportunity and utilizes merit-based principles to make employment-related decisions.
#clearance
At IPT Associates (IPTA), we enjoy solving real-world problems with technology. We work closely with our customers, teammates, experts, and partners to come up with practical solutions that make a difference. Whether it's a government or business organization, we focus on understanding the need and building something that works.
Our Team
At IPTA, everything starts with our people. We're big believers that when you invest in your team, great things happen. That's why we encourage learning, growth, and trying new things-even if you don't have all the answers yet.
Our culture is rooted in fierce determination, fearless integrity, and passionate service-but we also like to keep things collaborative, supportive, and down-to-earth.
We're Looking For People Who
- Are curious and excited about technology
- Like solving problems and figuring things out
- Can take initiative but also enjoy working with a team
- Want to keep learning, growing, and challenging themselves
Position Summary: You will provide full cybersecurity internal controls and Risk Management Framework (RMF) support under DoDI 8500.01 and DoDI 8510.01, including enterprise eMASS and RMF services.
Key Responsibilities
- Build RMF packages and maintain asset lists and categorizations
- Schedule and coordinate system validation reviews
- Produce artifacts that show control compliance
- Review ACAS and STIG reports and coordinate fixes
- Create, track, and maintain POA&Ms
- Run annual security reviews and take part in COOP and incident response testing
- Maintain Ports, Protocols, and Services Management (PPSM) and circuit registry records
- Take part in software assurance reviews and make sure findings are recorded in eMASS
- Cybersecurity certification (e.g., CISSP)
- Active Security Clearance Required
- 10 years in cybersecurity and RMF-related work
- Extensive experience with enterprise eMASS and RMF services
- Skill in building RMF packages and maintaining asset lists and categorizations
- Ability to schedule and coordinate system validation reviews
- Experience producing control compliance artifacts
- Knowledge of ACAS and STIG reports and coordinating fixes
- Experience creating, tracking, and maintaining POA&Ms
- Ability to run annual security reviews
- Experience with COOP and incident response testing
- Ability to maintain PPSM and circuit registry records
- Experience with software assurance reviews and recording items in eMASS POA&Ms
- Experience with security compliance and control documentation
- Bachelor's degree in computer science or equivalent experience
- Familiarity with DoDI 8500.01 and DoDI 8510.01
- Strong analytical, problem-solving, communication, and coordination skills
- Experience with DoD enterprise monitoring tools and practices
- Incident response experience
- Understanding of COOP and communication plans
- Ability to work well on a team and with many stakeholders
Certifications: CISSP or equivalent.
IPTA is an Equal Opportunity Employer. All employment decisions are based on individual merit, including qualifications, experience, performance, and business needs, consistent with applicable federal laws and federal contracting requirements. IPTA provides equal opportunity and utilizes merit-based principles to make employment-related decisions.
#clearance