ATO Specialist

Oddball; Northern (KY); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Fully remote

Yearly stipend

401(k) matching

Flexible PTO

Paid Holidays

Job summary

Oddball is seeking an experienced ATO Specialist to lead security authorization and compliance for the VA Chatbot program. You will own the ATO lifecycle, coordinating with engineering, program leadership, and government stakeholders to maintain audit-ready security posture while supporting delivery.

Responsibilities include preparing and updating SSPs, POA&Ms, SARs, and PIAs, ensuring controls are properly implemented, and driving continuous monitoring in alignment with RMF and VA security

Qualifications

• Experience leading ATO processes for federal information systems.
• Strong working knowledge of RMF and federal security requirements.
• Demonstrated experience producing and maintaining federal security documentation (SSPs, POA&Ms, PIAs, SARs).
• Familiarity with Zero Trust Architecture principles and how they apply within federal systems.

Responsibilities

• Lead and manage the ATO, reauthorization, and Continuous Monitoring lifecycle for the VA Chatbot system.
• Serve as the primary security point of contact for the program with VA stakeholders and internal leadership.
• Prepare, maintain, and update SSPs, POA&Ms, SARs, PIAs, and supporting evidence.

Skills

ATO processes

RMF knowledge

Zero Trust Architecture

Federal security requirements

Security artifacts management

Job description

Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.

We are seeking an experienced ATO Specialist to lead security authorization and compliance efforts for the VA Chatbot program. In this role, you’ll own and drive the Authority to Operate (ATO) lifecycle for a veteran-facing system, partnering closely with engineering, program leadership, and government stakeholders to maintain a strong, audit-ready security posture while supporting ongoing delivery.

What you’ll be doing:

• Lead and manage the ATO, reauthorization, and Continuous Monitoring lifecycle for the VA Chatbot system
• Serve as the primary security point of contact for the program, coordinating with VA stakeholders and internal leadership
• Prepare, maintain, and update required security and privacy artifacts, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), Privacy Impact Assessments (PIAs), and supporting evidence
• Partner with engineering and program management teams to ensure security controls are properly implemented, documented, and maintained in alignment with RMF and VA security policy
• Coordinate control assessments, evidence collection, and responses to audit or assessment findings
• Advocate for and support adoption of security best practices, including Zero Trust Architecture (ZTA) concepts, to strengthen the platform’s overall security posture

What you’ll bring:

• Proven experience leading ATO processes for federal information systems
• Strong working knowledge of the Risk Management Framework (RMF) and federal security requirements
• Demonstrated experience producing and maintaining federal security documentation, including SSPs, POA&Ms, PIAs, and SARs
• Familiarity with Zero Trust Architecture principles and how they apply within federal systems
• Performs other related duties as assigned.

Requirements:

• Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.

Education:

• Fully remote
• Yearly stipend
• Company Match 401(k) plan
• Flexible PTO, Paid Holidays

Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact an Oddball HR representative to request such an accommodation by emailing [e-mail]

Compensation:

At Oddball, it’s important each employee is compensated competitively and fairly. In alignment with state legal requirements. A range for the included position is listed below. Be advised, actual offer details are determined by job category, job location, and candidate skill level.

United States Wage Range: $100,000 – $140,000

Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. As set forth in Oddball’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.