Senior Cybersecurity & RMF Lead, Zero Trust Architect

Quantum Sky; Arlington (VA); On-site; USD 140,000 - 175,000; Full time

Job summary

Quantum Sky seeks a Cybersecurity / Information Assurance Lead to serve as the senior authority for enterprise cybersecurity and information assurance across the Joint Virtual Environment (JVE) in support of the F-35 JPO. This role owns the cybersecurity strategy for on-premises and Azure IL-5 environments and leads RMF execution and A&A artifacts.

Onsite presence in Arlington, VA is required; travel may be necessary to CONUS/OCONUS Tier sites.

Qualifications

• Education: MA/MS; substitution allowed with BA/BS and 12+ years of relevant experience.
• Certification: DoD 8140/8570 IAM Level III (e.g., CISSP, CISM, GSLC).
• Experience: 10+ years leading information security, cybersecurity, or information assurance programs in complex enterprise environments, including DoD RMF, NIST SP 800-53, continuous monitoring, vulnerability management, and ATO support.
• Operations & leadership: demonstrated ability to lead cybersecurity staff and coordinate with ISSMs, ISSOs, system owners, engineers, and authorizing officials; experience embedding security across the lifecycle and reviewing architectures and changes for security impacts.
• Zero Trust implementation spanning identity, device, network/environment, application/workload, and data controls.

Responsibilities

• Govern cybersecurity governance and policy: develop, maintain, and annually update security policies, standards, controls, and compliance aligned to DoDI 8500.01, DoDI 8510.01 (RMF), NIST SP 800-53, CNSS, CCRI criteria, and program directives.
• Lead RMF and A&A lifecycle: coordinate system categorization, control selection, implementation, assessment, and authorization; produce and maintain the SSP, SAR, SCTM, and POA&M in eMASS.
• Own continuous monitoring program: ensure monthly ACAS vulnerability scanning (≥98% scan rate), quarterly STIG reviews, and ESS scores ≥95% at least 90% of the time; track compliance on a weekly Security Dashboard (≥75% update).
• Direct vulnerability and patch management: drive remediation governance for IAVA/IAVB, benchmark compliance, and OS STIG settings; ensure timely reporting and closure across all assets.
• Oversee security operations and incident response: ingest SIEM telemetry, lead detection, triage, containment, eradication, and recovery per the OCIO incident response plan; coordinate with CSSP and JFHQ-DoDIN when thresholds are not met.
• Embed security into engineering: review architectures, designs, and changes for security impacts; liaison between Enterprise Architecture and ISSE/SSE to integrate controls through the SE process.

Skills

RMF & A&A

Continuous Monitoring

Vulnerability Management

Security Governance

Zero Trust

Education

MA/MS (or BA/BS + 12+ yrs)

Tools

eMASS

ACAS

STIGs

SIEM (LogRhythm)

Job description

Quantum Sky seeks a Cybersecurity / Information Assurance Lead to serve as the senior authority for enterprise cybersecurity and information assurance across the Joint Virtual Environment (JVE) in support of the F-35 JPO. This role owns the cybersecurity strategy for on-premises and Azure IL-5 environments and leads RMF execution and A&A artifacts.

Onsite presence in Arlington, VA is required; travel may be necessary to CONUS/OCONUS Tier sites.