Senior OT Cybersecurity RMF Lead — Hybrid MD

NETbuilder; Urbana (MD); Hybride; USD 126 000 - 154 000; Plein temps

Résumé du poste

NETbuilder is seeking an experienced Senior OT Cybersecurity / RMF Lead to support a newly awarded U.S. government cybersecurity project based in Urbana, Maryland.

The role focuses on leading RMF, ATO, and security governance across OT environments with frequent collaboration with engineers and government stakeholders. You will drive security documentation, control implementation, and authorization activities, ensuring regulatory alignment and high-security standards.

Qualifications

• 10+ years in cybersecurity with OT/ICS experience.
• Proven RMF/ATO leadership and government coordination.
• Strong knowledge of NIST SP 800-37/53/82.
• Experience drafting SSPs, SARs, POA&Ms.

Responsabilités

• Lead RMF and ATO activities from categorization to authorization.
• Define and review OT security architecture across ICS and IT.
• Apply NIST SP 800-53 controls to OT environments.
• Develop and review SSPs, SARs, and POA&Ms.
• Oversee security assessments, control implementation, and remediation.
• Establish governance, policies, and processes for the project.
• Provide leadership to cybersecurity engineers and project staff.
• Identify risks and remediation priorities with mitigations.
• Collaborate with government stakeholders and assessors.
• Review deliverables to ensure security and compliance.
• Represent the technical workstream in government meetings.

Connaissances

RMF Leadership

ATO Coordination

OT Cybersecurity

NIST SP 800-53

Security Documentation

Governance & Policy

Outils

eMASS

Description du poste

NETbuilder is seeking an experienced Senior OT Cybersecurity / RMF Lead to support a newly awarded U.S. government cybersecurity project based in Urbana, Maryland.

The role focuses on leading RMF, ATO, and security governance across OT environments with frequent collaboration with engineers and government stakeholders. You will drive security documentation, control implementation, and authorization activities, ensuring regulatory alignment and high-security standards.