Remote DoD Cyber RMF Lead ATO & Security Lifecycle

Rippling, Inc.; United States; Remote; USD 90,000 - 150,000; Part time

Benefits offered by this job

Travel costs covered

Job summary

AtLucayan Technology Solutions LLC is seeking a Cybersecurity Lead to direct the RMF and ATO efforts for a DoD emergency mass notification system. You will own the authorization package from boundary definition through AO decision support, collaborating with engineering and installation teams on an accelerated schedule.

The role demands leading RMF activities, authoring SSPs/ISAs, applying STIGs, and managing findings and patches, including on-site work as required.

Qualifications

• Legally authorized to work in the United States.
• Ability to obtain a DoD CAC and military base access.
• Minimum 5 years of DoD RMF experience, including leading systems through ATO.
• Hands‑on experience with eMASS, STIG/SRG compliance, ACAS, and POA&M management.
• Experience writing SSPs, ISAs, and security architecture documentation.
• Valid U.S. passport or ability to obtain one before travel.

Responsibilities

• Lead the full RMF lifecycle: boundary definition, categorization, control selection, implementation, assessment, and authorization
• Author the SSP, control narratives, network and data-flow diagrams, and ISAs
• Apply STIGs/SRGs, run SCAP, Evaluate-STIG, and ACAS/Nessus scans, and maintain hardened baselines
• Manage findings, POA&Ms, patching, and IAVM records, and direct field staff on remediation
• Secure system APIs and provide cybersecurity test procedures and evidence for acceptance testing
• Prepare an eMASS-ready ATO package and support assessor reviews, AO briefings, and IATT when needed
• Deliver continuous-monitoring and patch-management plans, weekly status reports, and closeout knowledge transfer

Skills

DoD RMF experience

eMASS experience

POA&M management

Security architecture documentation

Cybersecurity leadership

Tools

eMASS

SCAP

ACAS

Nessus

Job description

AtLucayan Technology Solutions LLC is seeking a Cybersecurity Lead to direct the RMF and ATO efforts for a DoD emergency mass notification system. You will own the authorization package from boundary definition through AO decision support, collaborating with engineering and installation teams on an accelerated schedule.

The role demands leading RMF activities, authoring SSPs/ISAs, applying STIGs, and managing findings and patches, including on-site work as required.