Cybersecurity Lead (RMF)

Technatomy Corporation; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

Technatomy Corporation seeks a Cybersecurity Lead (RMF) to coordinate security and RMF activities for a VA pharmacy traceability project. You translate security requirements into architecture, implement controls, and organize evidence for authorization decisions.

You will guide identity federation, MFA, and data protection while working with delivery teams and customer security officials to ensure compliant, auditable security posture throughout the project lifecycle.

Qualifications

• 6+ years in cybersecurity, security engineering or RMF activities.
• Experience leading RMF for enterprise information systems and authorization docs.
• Knowledge of NIST security controls and evidence development.
• Experience with identity management, access controls, and audit logging.

Responsibilities

• Lead security and RMF planning and maintain evidence aligned with architecture.
• Coordinate threat assessments, remediation tracking, and security acceptance.
• Guide identity federation, MFA, and site authorization; assess Entra ID integration.
• Ensure testing covers access denial, data isolation, auditability, and recovery checks.
• Maintain POA&Ms with owners and evidence; coordinate with assessors and stakeholders.
• Support release security reviews and operational handoff with security officials.
• Document inherited and shared controls and assess need for updated evidence.

Skills

RMF leadership

NIST RMF knowledge

Security engineering

Identity management

Vulnerability remediation

Security auditing

Education

Bachelor's degree (Cybersecurity / CS / Information Systems)

Tools

Microsoft Entra ID

Azure Key Vault

Power Platform security

Job description

If this sounds like an environment where you can thrive, keep reading!

At Technatomy, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customer’s success. We provide solutions to agencies and entities including the Department of Veterans Affairs, Department of Defense, Defense Logistics Agency, National Institutes of Health, and more. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

Technatomy is seeking a Cybersecurity Lead (RMF) to coordinate security, privacy, and Risk Management Framework (RMF) activities for the Department of Veterans Affairs (VA) pharmacy traceability project. You translate security requirements into architecture, implementation, and assessment actions. Working with delivery teams and customer security officials, you organize control evidence and remediation to support the customer’s authorization decisions.

DUTIES AND RESPONSIBILITIES:

• Lead security and privacy planning, define system boundaries and control responsibilities, and maintain RMF documentation and evidence aligned with the approved architecture.
• Review architecture and data flows for identity, access, logging, encryption, segmentation, and data minimization requirements.
• Coordinate threat assessments, vulnerability reviews, remediation tracking, and security acceptance activities.
• Guide VA identity federation, approved PIV and multifactor authentication, machine identities, and site authorization; assess Microsoft Entra ID integration where selected.
• Ensure security testing includes denied access, cross-site data isolation, auditability, and recovery-related control checks.
• Maintain security risks and Plans of Action and Milestones (POA&Ms), with remediation owners and closure evidence, and coordinate responses to customer assessors and authorization stakeholders.
• Support release security-impact reviews and operational handoff, including access reviews, incident escalation, and continuous monitoring; coordinate required authorization updates with customer security officials.
• Document inherited and shared controls with customer service owners, and assess whether application, interface, or hosting changes require updated evidence or additional review.

KNOWLEDGE AND SKILLS REQUIRED:

• At least 6 years of relevant professional experience in cybersecurity, security engineering, or Risk Management Framework activities.
• Experience leading security engineering or RMF activities for enterprise information systems.
• Working knowledge of NIST security control frameworks, authorization documentation, and control evidence development.
• Experience evaluating application and integration security, identity management, access controls, and audit logging.
• Ability to assess security findings, coordinate remediation, and communicate residual risks clearly.
• Experience working with engineering teams and independent assessors while maintaining clear authorization responsibilities.
• Ability to distinguish control implementation from assessment evidence, identify responsibility gaps, and coordinate closure across customer, vendor, and delivery teams.

KNOWLEDGE AND SKILLS DESIRED:

• Experience with security authorization, privacy reviews, and enterprise identity integration.
• Experience securing SAP, Dynamics 365 SCM, or Power Platform applications, Microsoft Entra ID federation, or Azure Key Vault and managed identities.
• Relevant cybersecurity certification such as CISSP, CISM, or an equivalent credential.
• Prior experience supporting Department of Veterans Affairs (VA) or other Federal agency applications or projects.

EDUCATION:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related discipline, or equivalent relevant experience.

CLEARANCE:

• Must be able to obtain and maintain a Public Trust clearance.

WORK LOCATION:

• Remote

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

This position requires U.S. citizenship.

Technatomy Corporation is an Equal Opportunity Employer. It is the policy of Technatomy Corporation to afford equal employment opportunity regardless of race, color, religion, national origin, sex, age, marital status, disability or veteran status, or any other status protected by applicable law.