Federal Health Cybersecurity SME & ISSO (RMF/ATO)

RockITdata; Arlington (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

rockITdata invites you to join as Cybersecurity SME / ISSO for a major federal health modernization program in the Washington, DC area. You will lead RMF activities, develop ATO packages, and oversee security documentation across the system lifecycle.

Working with engineering, cloud, infrastructure, testing, and Government security teams, you will ensure enterprise applications remain secure, compliant, and fully authorized while promoting security best practices.

Qualifications

• Bachelor's degree in cybersecurity or a related technical discipline.
• 5 years of experience in cybersecurity/ISSO responsibilities in enterprise IT.
• Experience implementing and maintaining RMF for federal programs.
• Experience developing/maintaining ATO packages, SSPs, POA&Ms, and other federal security docs.
• Strong knowledge of NIST SP 800-53, FISMA, FedRAMP, Zero Trust, and federal standards.

Responsibilities

• Lead RMF activities across the system lifecycle.
• Develop, maintain, and coordinate ATO documentation and packages.
• Prepare and maintain SSPs, SARs, POA&Ms, and other security docs.
• Coordinate security control implementation and continuous monitoring.
• Collaborate with engineering, cloud, infra, and development teams.
• Support vulnerability management, remediation, testing, and audit readiness.
• Monitor compliance with NIST, FISMA, VA, and other federal requirements.
• Provide cybersecurity guidance to project leadership and government stakeholders.

Skills

Leadership

Communication

Problem solving

Analytical

Education

Bachelor's degree in Cybersecurity/Information Assurance/CS/IS or related

Tools

AWS GovCloud

Azure Government

Job description

rockITdata invites you to join as Cybersecurity SME / ISSO for a major federal health modernization program in the Washington, DC area. You will lead RMF activities, develop ATO packages, and oversee security documentation across the system lifecycle.

Working with engineering, cloud, infrastructure, testing, and Government security teams, you will ensure enterprise applications remain secure, compliant, and fully authorized while promoting security best practices.