RMF & A&A Lead (Hybrid DC/RTP)

atek s.r.o.; Maryland; Hybrid; USD 165,000 - 185,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) with employer match

Paid time off

Professional development opportunities

Job summary

A-TEK seeks an experienced RMF/A&A Lead to support a federal customer. The Lead serves as the senior technical authority for RMF and A&A activities, leading authorization readiness, package development, governance, risk and compliance, and cybersecurity documentation.

The role coordinates with system owners, ISSOs, administrators, privacy officials, assessors, and agency cybersecurity personnel to maintain complete, current, and audit-ready authorization packages.

Qualifications

• Experience leading Federal RMF and A&A activities.
• Knowledge of NIST SP 800-37/800-53A, FISMA and continuous monitoring.
• Experience developing and maintaining Federal authorization packages.
• Strong technical writing and stakeholder coordination.
• Ability to support hybrid work in DC metro or Research Triangle area.

Responsibilities

• Lead RMF activities across three authorization boundaries and inventory.
• Maintain SSPs, SARs, POA&Ms, executive summaries, and ATO documentation.
• Coordinate annual security control assessments and provide evidence for assessors.
• Maintain assessor independence and avoid acting as the assessor of record unless authorized.
• Direct system registration, inventory reconciliation, artifact maintenance, and data quality review.
• Lead POA&M management, residual risk analysis, risk reporting, and remediation tracking.
• Support cloud security, FedRAMP documentation, and shared responsibility analysis.
• Review major changes, perform security impact analyses, and assist onboarding/decommissioning.

Skills

Federal RMF

A&A processes

NIST SP 800-37

NIST SP 800-53

FISMA

Technical writing

Stakeholder coordination

GRC tools

Security assessment

Tools

JCAM

Job description

A-TEK seeks an experienced RMF/A&A Lead to support a federal customer. The Lead serves as the senior technical authority for RMF and A&A activities, leading authorization readiness, package development, governance, risk and compliance, and cybersecurity documentation.

The role coordinates with system owners, ISSOs, administrators, privacy officials, assessors, and agency cybersecurity personnel to maintain complete, current, and audit-ready authorization packages.