IT Sys Solutions Architect

A2 Federal; Maryland; On-site; USD 140,000 - 180,000; Full time

Job summary

A2 Federal is seeking an experienced DoD RMF Program Manager to lead cybersecurity efforts for ATC information systems and enclaves. You will own the RMF lifecycle, build and submit authorization packages, and guide the surge workforce under COR and Contracting Officer oversight.

You will direct a team of IT professionals, ensuring DoD RMF, FISMA, and NIST standards are applied, with emphasis on risk management, audits, and continuous monitoring across DoD environments.

Qualifications

• Minimum 10 years of RMF lifecycle reporting experience.
• Minimum 5 years of progressive network/cloud/enclave experience.
• DoD RMF policies and practices; security audits; risk assessment; FISMA/NIST SP 800-53/37 compliance.
• Former experience as a Server Administrator or Network Administrator.

Responsibilities

• Lead the DoD RMF lifecycle for ATC systems and enclaves—categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop and submit authorization packages and lifecycle reports (SSPs, SARs, POA&Ms, risk assessments) in eMASS and support AO/IATT decisions.
• Architect security for network expansion and cloud/enclave efforts in line with NIST SP 800-53/800-37, DISA STIG/SRG, and DoD Cloud guidance.
• Plan and lead security audits, vulnerability assessments, and STIG reviews; track findings to closure and brief residual risk.

Skills

CISSP certification

RMF lifecycle reporting

DoD RMF policies

Network/cloud/enclave exp

Server/Network administration

Education

Bachelor's or equivalent

Tools

eMASS

STIG Viewer/SCAP

ACAS/Nessus

Job description

Serves as the contractor's Key Personnel and Contract Manager for ATC Cybersecurity Engineering and RMF support. Leads the cybersecurity/RMF program for ATC information systems and enclaves, owns the RMF lifecycle and authorization reporting, directs the IT Certified Professional(s) and any surge staff, and is the primary technical and management interface with the COR and Contracting Officer.

MINIMUM QUALIFICATIONS

• CISSP certification (current, in good standing).
• Minimum 10 years of working experience managing RMF lifecycle reporting. Per Q&A #10, may include DIACAP-to-RMF transition work, provideda significant portionis RMF; experience must be DoD (non-DoD FedRAMP / NIST 800-53 work does not count).
• Minimum 5 years of progressive experience (progressive levels of responsibility and exposure to operating systems and environments) with network expansion and cloud/enclaves.
• Resume must reflect experience with: DoD RMF policies and practices; security audits; risk assessment practices; DISA STIG compliance; NIST Special Publications; FISMA compliance.
• Former experience as a Server Administrator or Network Administrator.

DUTIES AND RESPONSIBILITIES

• Lead execution of the DoD RMF lifecycle (DoDI 8510.01) for ATC systems and enclaves — categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop,maintain, andsubmitauthorization packages and lifecycle reporting (System Security Plans, Security Assessment Reports, POA&Ms, risk assessments) in eMASSand support ATO/IATT decisions by the AO.
• Architect security for network expansion and cloud/enclave efforts, ensuring designs meet NIST SP 800-53/800-37, DISA STIG/SRG, and DoD Cloud Computing SRG requirements before deployment.
• Plan and lead security audits, vulnerability assessments, and STIG compliance reviews; track findings to closure and brief residual risk to Government leadership.
• Ensure FISMA reporting and Army cybersecurity compliance (AR 25-2), including IAVA/IAVM, ACAS/Tenable results, and HBSS/ESS posture where applicable.
• Direct and quality-check the work of the IT Certified Professional-Sr and surge staff; assign tasks, review artifacts, and manage surge onboarding when the Government exercises surge CLINs.
• Verify that all contractor cyber personnel meet DoDM 8140.03 qualification requirements andmaintaincertifications and continuing education.

KNOWLEDGE, SKILLS, AND TOOLS

• Deep knowledge of DoD RMF, DoDI 8510.01, DoDI 8500.01, NIST SP 800-37/53/53A/137, CNSSI 1253, FISMA.
• Hands-on administration background (Windows/Linux server or network) sufficient to evaluate technical implementations and STIG findings.
• eMASS, STIG Viewer/SCAP, ACAS/Nessus; cloud and enclave security architecture.
• Ability to brief senior Government stakeholders and manage a small technical team on an FFP contract.