Remote Cybersecurity Lead - DoD RMF/ATO Expert

Go Fractional; Northern (KY); Remote; USD 80.000 - 120.000; Teilzeit

Zusammenfassung

Go Fractional seeks an experienced Cybersecurity Lead to direct RMF and ATO efforts for a DoD emergency mass notification system. You will own the authorization package from boundary definition through AO decision support, collaborating with the engineering team on an accelerated schedule.

The role requires DoD RMF expertise, CAC eligibility, and IAM II certification, with on-demand travel to a DoD site as needed. This is a US-based remote position with on-site options.

Qualifikationen

• Must be legally authorized to work in the United States.
• Must be eligible to obtain a DoD CAC and military base access.
• Active DoD 8570/8140 IAM Level II-compliant certification.
• Minimum 5 years of DoD RMF experience, including leading systems through ATO.
• Hands-on experience with eMASS, STIG/SRG compliance, ACAS, and POA&M management.
• Experience writing SSPs, ISAs, and security architecture documentation.
• Valid U.S. passport or ability to obtain one before travel.

Aufgaben

• Lead the full RMF lifecycle: boundary definition, categorization, control selection, implementation, assessment, and authorization.
• Author the SSP, control narratives, network and data-flow diagrams, and ISAs.
• Apply STIGs/SRGs, run SCAP, Evaluate-STIG, and ACAS/Nessus scans, and maintain hardened baselines.
• Manage findings, POA&Ms, patching, and IAVM records, and direct field staff on remediation.
• Secure system APIs and provide cybersecurity test procedures and evidence for acceptance testing.
• Prepare an eMASS-ready ATO package and support assessor reviews, AO briefings, and IATT when needed.
• Deliver continuous-monitoring and patch-management plans, weekly status reports, and closeout knowledge transfer.

Kenntnisse

RMF expertise

ATO leadership

eMASS experience

STIG/SRG compliance

ACAS/Nessus

ISAs & SSPs

8570 IAM II

Tools

eMASS

ACAS

Nessus

STIG/SRG

ISAs

Jobbeschreibung

Go Fractional seeks an experienced Cybersecurity Lead to direct RMF and ATO efforts for a DoD emergency mass notification system. You will own the authorization package from boundary definition through AO decision support, collaborating with the engineering team on an accelerated schedule.

The role requires DoD RMF expertise, CAC eligibility, and IAM II certification, with on-demand travel to a DoD site as needed. This is a US-based remote position with on-site options.