RMF & DoD Cybersecurity Lead – IL4/IL5 Cloud ATO

All Native Group, The Federal Services Division of Ho-Chunk Inc.; Fort Campbell North (KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

All Native Group seeks a Cybersecurity / RMF Lead to take charge of security authorization for a cloud-hosted maintenance platform, implementing IL4/IL5 controls, RMF/ATO evidence, and CUI protection. The role covers continuous monitoring, incident reporting, and DoD-aligned security practices.

The candidate will coordinate with Mission Owners and Authorizing Officials, manage vulnerability scans, and maintain NIST 800-171 evidence.

Qualifications

• 7+ years of DoD cybersecurity experience and RMF/ATO leadership.
• Experience authoring and reviewing ATO packages (eMASS) and evidence.
• Knowledge of Azure Government or equivalent cloud security tooling.
• Familiarity with NIST SP 800-171 and CMMC assessments is preferred.
• Background check and installation access requirements.

Responsibilities

• Prepare and manage the security authorization package (SSP, POA&M, evidence).
• Implement identity, access and data controls including CAC/PIV federation and audits.
• Define OT segmentation for sensors and building controllers.
• Lead vulnerability management, continuous monitoring, and incident reporting.
• Maintain NIST SP 800-171 evidence and support CMMC assessments.
• Deliver security awareness content for technicians and administrators.
• Run vulnerability scans and track remediation to closure.
• Review audit logs and security alerts; investigate anomalies.
• Perform security impact analysis on system changes.

Skills

RMF/ATO package development

DoD cybersecurity controls

Risk assessment

Continuous monitoring

Clear security communication

Audit log review

Education

Bachelor's degree in Cybersecurity, Information Systems or related field

Tools

Azure Government tooling

ACAS/Nessus

SIEM (Microsoft Sentinel)

Splunk

Job description

All Native Group seeks a Cybersecurity / RMF Lead to take charge of security authorization for a cloud-hosted maintenance platform, implementing IL4/IL5 controls, RMF/ATO evidence, and CUI protection. The role covers continuous monitoring, incident reporting, and DoD-aligned security practices.

The candidate will coordinate with Mission Owners and Authorizing Officials, manage vulnerability scans, and maintain NIST 800-171 evidence.