Cybersecurity Lead: RMF/ATO for DoD OCI Cloud

conceptplus; United States; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive pay

Health, dental, vision insurance

Paid life insurance

Paid time off

11 paid holidays

Performance bonuses

Tuition reimbursement

Unlimited training

Collaborative environment

Job summary

Concept Plus is seeking an experienced Cybersecurity Lead to plan, implement, upgrade, and monitor security measures for Oracle Cloud Infrastructure and related environments. You will serve as the contractor's ISSO, manage RMF lifecycles, and sustain ATO readiness across cloud and on-premises systems.

The role requires a CISSP or higher, active DoD Secret clearance, and extensive RMF experience. You will respond to incidents, coordinate with DISA and auditors, and embed security into DevSecOps

Qualifications

• Active CISSP or higher certification required at time of hire.
• 5+ years of information security experience in a DoD or Federal environment, including direct ISSO experience.
• Experience managing the DoD RMF lifecycle, including SSP, POA&M, and ATO maintenance.
• Familiarity with NIST SP 800-53, DISA STIGs, SCAP/ACAS scanning tools, and cloud security controls for FedRAMP/DoD.

Responsibilities

• Plan, implement, upgrade, and monitor security measures for networks, systems, data, and OCI environments.
• Own the DoD RMF package lifecycle from system categorization to continuous monitoring.
• Coordinate ATO with AO, SCA, and ISSM; maintain SSP, POA&M, and RMF artifacts.
• Detect, respond to, and document cybersecurity incidents and coordinate remediation with DISA, Cloud One, and the Government ISSM.
• Embed RMF control validation into CI/CD pipelines with DevSecOps teams for continuous ATO.
• Maintain enterprise security posture with vulnerability assessments and SCAP scans.
• Support SOC 1 Type 2 audits for Federal Financial Management systems migrating to OCI.

Skills

Security awareness

Communication

Collaboration

Problem solving

Attention to detail

Education

Bachelor's degree in Cybersecurity, IT, CS or related field

Tools

RMF lifecycle tooling

SCAP/ACAS

OCI security services

CI/CD security

Job description

Concept Plus is seeking an experienced Cybersecurity Lead to plan, implement, upgrade, and monitor security measures for Oracle Cloud Infrastructure and related environments. You will serve as the contractor's ISSO, manage RMF lifecycles, and sustain ATO readiness across cloud and on-premises systems.

The role requires a CISSP or higher, active DoD Secret clearance, and extensive RMF experience. You will respond to incidents, coordinate with DISA and auditors, and embed security into DevSecOps