ATO Lead — Remote Security Compliance (Secret)

D9Tech Resources LLC; Arlington (VA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

D9Tech Resources LLC is seeking a Security Compliance professional to author SSPs, manage POA&M, and drive ATO processes for DoD/cloud environments.

You will translate technical findings into actionable remediation with engineers, maintain eMASS or XACTA packages, and ensure continuous monitoring while coordinating with ISSOs and AO.

Candidates must hold active Secret clearance or higher, US citizenship, and experience with NIST RMF and DoD frameworks.

Qualifications

• Active Secret clearance or higher and US citizenship required.
• Experience owning an ATO lifecycle from documentation to authorization decision.
• Hands-on authorship of System Security Plans and control implementation statements.
• Proficiency with eMASS or XACTA tooling.
• Strong knowledge of NIST SP 800-53 and RMF lifecycle.
• POA&M management including milestone development and evidence collection.
• Ability to communicate clearly with engineers, ISSOs, ISSMs, and AO.

Responsibilities

• Author the package: write and maintain SSPs, control statements, and supporting artifacts.
• Own the POA&M lifecycle: open, prioritize, track, and close POA&M with evidence.
• Drive the ATO to signature: manage accreditation timeline and brief officials.
• Work the tooling: maintain the package in eMASS or XACTA with current artifacts.
• Translate scan output into action: review ACAS, STIG, and cloud findings, remediate with engineers.
• Sustain continuous monitoring: run recurring control assessments and reporting cadence.
• Advise early: participate in architecture discussions to design controls upfront.

Skills

Active Secret clearance or higher

U.S. citizenship

Full ATO ownership

SSP and control statements drafting

eMASS or XACTA proficiency

NIST SP 800-53 & RMF lifecycle

POA&M management

Clear communication with engineers/IS/

Tools

eMASS

XACTA

Job description

D9Tech Resources LLC is seeking a Security Compliance professional to author SSPs, manage POA&M, and drive ATO processes for DoD/cloud environments.

You will translate technical findings into actionable remediation with engineers, maintain eMASS or XACTA packages, and ensure continuous monitoring while coordinating with ISSOs and AO.

Candidates must hold active Secret clearance or higher, US citizenship, and experience with NIST RMF and DoD frameworks.