Senior InfoSec Manager - DoD RMF, Cloud & AI

OpenTalent; Virginia (MN); On-site; USD 140,000 - 200,000; Full time

Job summary

TDI is seeking an experienced cybersecurity professional to lead RMF activities and coordinate security across DoW systems. The role focuses on cloud-native workloads, DoD RMF, NIST 800-53 controls, and AI security considerations, with minimal travel and a requirement for active clearance.

The candidate will collaborate with system architects, DevSecOps, and developers to ensure secure SDLC integration, develop SSPs/SARs/POA&Ms, and maintain compliance posture across environments.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology.
• 8+ years in cybersecurity with RMF support for DoD/DoW systems.
• Active Secret or Top-Secret clearance required.
• CISSP and/or CISM certifications are preferred.

Responsibilities

• Lead and support RMF execution and customer coordination in an IL 6 environment.
• Provide expert guidance on NIST SP 800-53 controls and DoW frameworks.
• Conduct security architecture reviews for cloud-native and containerized workloads.
• Evaluate security controls in Kubernetes, Docker, and cloud platforms.
• Develop SSPs, SARs, POA&Ms, and related RMF documents.
• Perform threat modeling, vulnerability assessments, and risk analysis for cloud/AI ecosystems.
• Interface with architects, developers, and DevSecOps to embed security in SDLC.
• Monitor and report security compliance through Continuous Monitoring.

Skills

RMF execution

NIST SP 800-53

Cloud security

Kubernetes

Docker

Security architecture reviews

Threat modeling

Vulnerability assessments

SDLC security

ConMon

DoD RMF

Generative AI security

Security clearance knowledge

Education

Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology

Tools

AWS

Azure

GCP

IAM

VPC

Job description

TDI is seeking an experienced cybersecurity professional to lead RMF activities and coordinate security across DoW systems. The role focuses on cloud-native workloads, DoD RMF, NIST 800-53 controls, and AI security considerations, with minimal travel and a requirement for active clearance.

The candidate will collaborate with system architects, DevSecOps, and developers to ensure secure SDLC integration, develop SSPs/SARs/POA&Ms, and maintain compliance posture across environments.