Senior OT Cybersecurity / RMF Lead

NETbuilder; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

NETbuilder is seeking an experienced OT cybersecurity leader to own the RMF/ATO workstream and security architecture for an operational technology program. You will guide control baselines, manage deliverable quality, and communicate with the Government customer and assessors.

Responsibilities include mapping evidence to controls, tailoring NIST overlays for OT, and supporting POA&M milestones. Remote US-based with client travel in Eastern Time Zone.

Qualifications

• 10+ years in cybersecurity with at least 5 years in OT/IC environments.
• Hands-on RMF to ATO experience, SSP/SAR/POA&M development.
• Working knowledge of NIST SP 800-37/800-53/800-82.
• Ability to lead technical teams and present findings to senior stakeholders.
• Eligibility to work in the United States.

Responsibilities

• Lead the RMF/ATO workstream from categorization through authorization.
• Define and review OT cybersecurity architecture across control systems, networks, and IT.
• Tailor NIST SP 800-53 overlays for OT environments with rationale.
• Provide system boundary inputs: asset inventories, interconnections, data flows.
• Map evidence to controls so assessors can trace claims to proof.
• Support POA&M development, milestones, and closure planning.
• Set the technical quality bar for deliverables and review outputs.
• Represent the workstream in meetings with Government customers and officials.

Skills

OT cybersecurity

RMF/ATO leadership

NIST guidance

govt stakeholder communication

team leadership

Tools

eMASS

Job description

Location - US Remote with client travel (Eastern Time Zone)

The Role

You will lead the technical and RMF/ATO workstream for an operational technology (OT) cybersecurity program. You own the security architecture, the controls baseline, and the technical quality of everything the team submits toward authorization. Engineers, documentation leads, and platform specialists look to you for direction, and the Government customer looks to you for answers.

What You Will Do

• Lead the RMF/ATO workstream from categorization through authorization, keeping the package on schedule and defensible.
• Define and review OT cybersecurity architecture across control systems, networks, and supporting IT.
• Tailor NIST SP 800-53 controls and overlays for OT environments, documenting the rationale for each decision.
• Provide system boundary inputs, including asset inventories, interconnections, and data flows.
• Map technical evidence to controls so assessors can trace every claim to proof.
• Support POA&M development, prioritization, and closure planning with realistic milestones.
• Set the technical quality bar for deliverables, and review engineering and documentation outputs before submission.
• Represent the technical workstream in meetings with the Government customer, assessors, and authorizing officials.

What You Bring

• 10 or more years in cybersecurity, with at least five years in OT, IC, or industrial control environments.
• Hands-on experience taking systems through RMF to ATO, including SSP, SAR, and POA&M development.
• Working knowledge of NIST SP 800-37, NIST SP 800-53, and NIST SP 800-82.
• Understanding of industrial protocols and architectures (for example, Modbus, DNP3, EtherNet/IP, and the Purdue model).
• Experience leading technical teams and presenting findings to senior Government stakeholders.
• A relevant certification such as CISSP, GICSP, or CISM.
• Eligibility to work in the United States.

Nice to Have

• An active U.S. security clearance, or eligibility to obtain one.
• GIAC GRID or other IC‑specific certification.
• Experience with eMASS or similar Government authorization tools.
• Background in a specific OT sector such as energy, water, manufacturing, or facilities.

About NETbuilder

NETbuilder is a specialist technology partner founded in 1999. We help enterprises and mid‑market organizations lead technology transformation through specialist consulting, managed services, and enterprise insourcing across security, ServiceNow, observability, and agentic automation.