Cybersecurity & RMF Support - Senior
About The Position
Makoa Technology Services seeks a senior IT cybersecurity specialist to support Risk Management Framework (RMF) and Authority to Operate (ATO) lifecycle activities at the U.S. Army Aberdeen Test Center. The position supports RMF categorization, security controls, assessments, security authorization, ATO maintenance, and lifecycle reporting. It also involves reconciling hardware and software assets and configurations with approved system baselines and security documentation; reviewing engineering changes, system boundaries, interoperability, and configuration-management and technical-control packages; and maintaining security-control evidence, assessment findings, Plans of Action and Milestones (POA&Ms), and continuous-monitoring records. The specialist supports Security Control Assessor (SCA) reviews, vulnerability management, DISA STIG compliance, and IAVM for ATC networks.
Requirements
- Five or more years supporting both RMF lifecycle reporting and software/hardware reconciliation.
- CompTIA CASP+/SecurityX or CISSP certification by contract award; CISSP is an accepted equivalent.
- Experience managing networks using Windows, Linux, and Apple platforms in classified and unclassified settings.
- Top Secret personnel clearance by contract award.
- Ability to maintain required classified-network/SIPRNet access.
- Ability to maintain accurate technical documentation and collaborate with assessors, engineers, and system owners.
Nice To Haves
- Experience with NIST SP 800-53.
- Experience with DoDI 8510.01.
- Experience with security authorization packages.
- Experience with STIGs.
- Experience with POA&Ms.
- Experience with vulnerability-assessment tools.
Responsibilities
- Support RMF categorization, security controls, assessments, security authorization, ATO maintenance, and lifecycle reporting.
- Reconcile hardware and software assets and configurations with approved system baselines and security documentation.
- Review engineering changes, system boundaries, interoperability, and configuration-management and technical-control packages.
- Maintain security-control evidence, assessment findings, POA&Ms, and continuous-monitoring records.
- Support SCA reviews, vulnerability management, DISA STIG compliance, and IAVM for ATC networks.
- Maintain accurate technical documentation and collaborate with assessors, engineers, and system owners.
- Manage networks using Windows, Linux, and Apple platforms in classified and unclassified settings.
- Maintain required classified-network/SIPRNet access.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
