Cyber Assessment & Authorization Engineer E4

**WE ARE ARCARITHM**, **and we are changing the world!** If you are ready to grow your career and change the world with us, then join the Arcarithm team! At Arcarithm, we cultivate and foster an environment of integrity, open communication, work life balance, and career development. We are committed to investing in our employees by offering comprehensive health insurance options, a generous 401K plan, competitive salaries, continuous career growth opportunities, flexible schedules including remote work, mentoring and performance incentives. Arcarithm is currently seeking top talent in the areas of full stack software development, artificial intelligence, optimization, and data analytics. You will work in a dynamic and challenging environment alongside our customers which include Lockheed Martin, General Dynamics, Northrop Grumman, Raytheon, US Army, US Navy, US Air Force, the Missile Defense Agency, and NASA on cutting edge technologies including machine learning, augmented and virtual reality, big data analytics, and more! We are excited to continue to change and improve the world through innovation and technology! Contact us today to hear more about Arcarithm and all we offer! **Job Title: Cyber Assessment & Authorization Engineer E4** **Job Location: Colorado Springs, CO** **Active Top Secret clearance required to start.** ### Position Responsibilities - Process and track DD Form 2875 user account forms and required training for privileged and non-privileged accounts, perform annual validation of accounts, and work with system administrator on creation, modification, and removal of accounts. - Perform assessment of systems and networks within a virtual environment and identify where those systems deviate from acceptable configurations, enclave policy, or local policy. This is achieved through passive evaluations such as compliance audits using STIG Viewer, SCAP, etc. and active evaluations such as vulnerability assessments utilizing ACAS. - Perform Security Technical Implementation Guide (STIG) assessments and hardening for both Windows, Red Hat Enterprise Linux (RHEL) systems, and networking equipment utilizing ConfigOS. - Develop test plans reflecting how STIG checks are implemented and be able to show expected outcomes of those checks. - Update Risk Management Framework (RMF) artifact documentation to ensure system hardening non-compliant is tracked and remediated. - Establish strict program control processes to ensure mitigation of risks and supports obtaining assessment and authorization of systems. Includes support of process, analysis, coordination, control certification test, compliance documentation, as well as investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits. - Assist in the implementation of the required government policy (i.e., NISPOM, NIST, DoD), making recommendations on process tailoring, participating in and documenting process activities. - Perform analyses to validate established cybersecurity controls and requirements and to recommend cybersecurity safeguards. - Support program test milestones through pre-test preparations, participating in the tests, analysis of the results, and preparation of required artifacts supporting authorization. - Prepare artifacts such as Test Results (TR), Authorization Boundary Diagrams (ABD), Network Topologies, Flow-diagrams, Hardware and Software listings, Ports, Protocols, and Services Management documentation, supporting Assessment and Authorization activities and maintain the Plan of Actions and Milestones (POA&M). - Periodically conduct a complete review of each program support and operational system's audits and monitor corrective actions until all actions are closed. - Coordinate across the program to address identified deficiencies during RMF assessment activities. ### Basic Qualifications - Generally 3+ years of related experience and may have post-secondary degree or training in a…