IT Architect Senior

TMPC • Aberdeen Proving Ground, MD

5d • Onsite

About The Position

TMPC, Inc. is seeking an IT Architect Senior to join its team. The position is a senior cybersecurity engineering and Risk Management Framework (RMF) practitioner role supporting Department of Defense environments. The role manages RMF lifecycle activities, Authority to Operate (ATO) sustainment, DISA STIG compliance, and security control implementation across classified and unclassified environments. It also supports network expansion and enclave or cloud migration while maintaining security and compliance requirements.

The position requires a current CISSP and substantial progressive DoD experience. The successful candidate will bring a background in network and server administration, hands-on RMF documentation, continuous monitoring, and POA&M management, as well as experience supporting Windows, Linux, and Apple platforms. This is a contingent hire tied to contract award; selected candidates will be named in the proposal and asked to sign a Letter of Commitment. Salary is DOE.

Requirements

• More than 12 years of progressive DoD experience managing RMF lifecycle activities, ATO sustainment, DISA STIG compliance, and security control implementation.
• Current CISSP certification.
• CompTIA Security+ baseline certification.
• DoD 8570/8140 IAT Level III / IAM Level II certification or higher.
• Ability to maintain SIPRNet access.
• Experience with RMF documentation, continuous monitoring, and POA&M management.
• Experience supporting multi-platform environments, including Windows, Linux, and Apple.
• Demonstrated experience with DoD RMF policies, security audits, risk assessments, DISA STIGs, NIST SP 800-53, and FISMA compliance.
• Bachelor's degree in Computer Science or a related field, or equivalent experience.

Responsibilities

• Manage RMF categorization, control selection, implementation, assessment, and continuous monitoring for DoD information systems.
• Prepare and maintain System Security Plans, Security Assessment Reports, and Plans of Action & Milestones.
• Support Security Control Assessor engagements and authorization activities, including ATO decisions and sustainment.
• Manage network expansion and enclave or cloud migration requirements while maintaining RMF compliance and STIG baselines.
• Perform configuration management reviews of hardware and software baseline changes and participate in technical review and control boards.
• Conduct continuous monitoring, IAVM response, and vulnerability management across unclassified and Secret environments.
• Administer Windows and Linux server environments supporting operational networks.
• Implement security controls, access management, and baseline configurations consistent with DISA STIGs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior