Senior RMF & ATO Cybersecurity Lead

RMantra Solutions Inc.; Fort Meade (MD); Hybrid; USD 130,000 - 170,000; Full time

Job summary

RMantra Solutions seeks a Senior Information System Security Manager (ISSM) to lead RMF and ATO activities for DoD systems at Ft Meade, MD. This onsite role requires strong governance, policy expertise, and hands-on risk management across the security lifecycle.

You will coordinate with cross-functional teams, prepare authorization packages, and ensure compliance with NIST SP 800-53, FISMA, and ICD 503, while maintaining communication with stakeholders and DISA reviews.

Qualifications

• Bachelor’s or Master’s degree with DoD experience.
• CISSP/CISM or similar cybersecurity certification preferred.
• Deep knowledge of DoD policies, RMF, NIST standards.
• Experience building/maintaining ATOs for enterprise systems.
• Experience with security tools (firewalls, IDS/IPS).
• Ability to produce security reports for stakeholders.

Responsibilities

• Manage RMF lifecycle and ATO accreditation for supported systems.
• Provide ISSM, FISMA, and C&A support.
• Conduct assessments of security controls in eMASS and PPSM.
• Maintain eMASS records and POA&Ms per ATO conditions.
• Coordinate cybersecurity activities for testing and operation authorization.
• Develop test plans, reports, and authorization materials.
• Lead governance and reporting on system architectures and security plans.

Skills

RMF lifecycle

NIST SP 800-53

System security engineering

Vulnerability assessment

Cybersecurity governance

Security reporting

Cross-functional collaboration

SIEM

Education

Bachelor’s Degree

Master’s degree

Tools

eMASS

PPSM

DISA OAB

SIEM

Job description

Senior Information System Security Manager (ISSM)

Location:

Ft Meade, MD

Work Schedule

100% Onsite

Clearance

Shift

Security+ CE

Primary Responsibilities

• Manage the Risk Management Framework (RMF) lifecycle for supported systems enabling the achievement and continued maintenance of Authority to Operate (ATO) accreditation.
• Provide ISSM, FISMA, and certification and accreditation support for systems and associated components.
• Conduct recurring assessments of security controls and documentation in eMASS and PPSM to verify continued accuracy, compliance, and readiness.
• Manage whitelist records, address vulnerabilities identified through recurring IAVMS scans, and develop Plans of Action and Milestones (POA&Ms) when required.
• Maintain eMASS control records and POA&Ms in accordance with ATO conditions, approval requirements, and remediation timelines.
• Coordinate cybersecurity activities supporting interim and final authorization to test and operate, including assessments, mitigation planning, patch validation, implementation tracking, and status reporting.
• Create and deliver cybersecurity test plans, test reports, implementation plans, security technical configuration documentation, vulnerability assessment reports, and authorization package materials.
• Lead cybersecurity governance and reporting activities, including the development and maintenance of system architectures, requirements, security plans, protection plans, IAVA actions, and IA-related objectives.
• Prepare program documentation, evidence, and briefings for DISA OAB reviews and support the team throughout the review process.

Basic Qualifications:

Preferred Qualifications

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar cybersecurity certification.
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• In-depth experience with network systems and building/maintaining an ATO for enterprise computing information systems.
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders.
• Clearance: USSecretclearance required
• Experience in managing security for complex DoD programs or mission-critical systems.
• Experience with security tools for vulnerability scanning, penetration testing, and security auditing.
• Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).
• Experience with configuration management and change management processes in a secure environment.
• Experience with automation and the continuous ATO (cATO) process.

Required Education and Experience:

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.

Join a dynamic team where your ideas matter and your career thrives.