Senior RMF & ATO Cybersecurity Lead

RMantra Solutions; Fort Meade, Northern (MD, KY); Hybrid; USD 130,000 - 170,000; Full time

Job summary

RMantra Solutions seeks a Senior Information System Security Manager (ISSM) to lead RMF and ATO activities for DoD systems at Ft Meade, MD. This onsite role requires strong governance, policy expertise, and hands-on risk management across the security lifecycle.

You will coordinate with cross-functional teams, prepare authorization packages, and ensure compliance with NIST SP 800-53, FISMA, and ICD 503, while maintaining communication with stakeholders and DISA reviews.

Qualifications

• Bachelor’s or Master’s degree with DoD experience.
• CISSP/CISM or similar cybersecurity certification preferred.
• Deep knowledge of DoD policies, RMF, NIST standards.
• Experience building/maintaining ATOs for enterprise systems.
• Experience with security tools (firewalls, IDS/IPS).
• Ability to produce security reports for stakeholders.

Responsibilities

• Manage RMF lifecycle and ATO accreditation for supported systems.
• Provide ISSM, FISMA, and C&A support.
• Conduct assessments of security controls in eMASS and PPSM.
• Maintain eMASS records and POA&Ms per ATO conditions.
• Coordinate cybersecurity activities for testing and operation authorization.
• Develop test plans, reports, and authorization materials.
• Lead governance and reporting on system architectures and security plans.

Skills

RMF lifecycle

NIST SP 800-53

System security engineering

Vulnerability assessment

Cybersecurity governance

Security reporting

Cross-functional collaboration

SIEM

Education

Bachelor’s Degree

Master’s degree

Tools

eMASS

PPSM

DISA OAB

SIEM

Job description

RMantra Solutions seeks a Senior Information System Security Manager (ISSM) to lead RMF and ATO activities for DoD systems at Ft Meade, MD. This onsite role requires strong governance, policy expertise, and hands-on risk management across the security lifecycle.

You will coordinate with cross-functional teams, prepare authorization packages, and ensure compliance with NIST SP 800-53, FISMA, and ICD 503, while maintaining communication with stakeholders and DISA reviews.