ATO Specialist

Oddball; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Fully remote

Yearly stipend

Comprehensive Benefits Package

Company Match 401(k) plan

Flexible PTO, Paid Holidays

Job summary

Oddball seeks an experienced ATO Specialist to lead security authorization and RMF compliance for the VA Chatbot program. You’ll own the ATO lifecycle and partner with engineering, program leadership, and government stakeholders to maintain an audit-ready security posture while delivering value.

You’ll coordinate SSPs, POA Ms, SARs, PIAs, and other artifacts, drive continuous monitoring, and promote Zero Trust practices to strengthen the platform’s security in a federal environment.

Qualifications

• Experience leading ATO for federal information systems.
• Strong RMF and federal security requirements knowledge.
• Experience producing SSPs, POA Ms, PIAs, SARs.
• Understanding of Zero Trust principles in federal context.

Responsibilities

• Lead ATO, reauthorization, and Continuous Monitoring for the VA Voicebot.
• Serve as the security point of contact with VA and leadership.
• Prepare and update SSPs, POA Ms, SARs, PIAs, and supporting evidence.
• Ensure security controls align with RMF and VA policy.
• Coordinate evidence collection and responses to findings.
• Advocate for security best practices including ZTA.

Skills

Experience with ATO processes

RMF knowledge

Zero Trust architecture concepts

Security documentation

Stakeholder coordination

Education

Bachelor’s degree

Job description

Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.

Job Summary

We are seeking an experienced ATO Specialist to lead security authorization and compliance efforts for the VA Chatbot program. In this role, you’ll own and drive the Authority to Operate (ATO) lifecycle for a veteran-facing system, partnering closely with engineering, program leadership, and government stakeholders to maintain a strong, audit-ready security posture while supporting ongoing delivery.

What you’ll be doing:

• Lead and manage the ATO, reauthorization, and Continuous Monitoring lifecycle for the VA Voicebot system
• Serve as the primary security point of contact for the program, coordinating with VA stakeholders and internal leadership
• Prepare, maintain, and update required security and privacy artifacts, including System Security Plans (SSPs), Plans of Action and Milestones (POA Ms), Security Assessment Reports (SARs), Privacy Impact Assessments (PIAs), and supporting evidence
• Partner with engineering and program management teams to ensure security controls are properly implemented, documented, and maintained in alignment with RMF and VA security policy
• Coordinate control assessments, evidence collection, and responses to audit or assessment findings
• Advocate for and support adoption of security best practices, including Zero Trust Architecture (ZTA) concepts, to strengthen the platform’s overall security posture

What you’ll bring:

• Proven experience leading ATO processes for federal information systems
• Strong working knowledge of the Risk Management Framework (RMF) and federal security requirements
• Demonstrated experience producing and maintaining federal security documentation, including SSPs, POA Ms, PIAs, and SARs
• Familiarity with Zero Trust Architecture principles and how they apply within federal systems

Requirements

Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.

Education

Bachelor’s degree

Benefits

• Fully remote
• Yearly stipend
• Comprehensive Benefits Package
• Company Match 401(k) plan
• Flexible PTO, Paid Holidays

Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. An