Lead ATO Subject Matter Expert

Graham Technologies•Washington, DC

2d•Hybrid

About The Position

Graham Technologies is seeking a Lead ATO Subject Matter Expert to support a high-visibility federal cybersecurity program. This role provides senior leadership across Risk Management Framework (RMF) activities, system authorization, and classified cybersecurity operations.

Requirements

10+ years of IT Project Management experience (Waterfall and Agile).
10+ years performing system security assessments, security documentation, and security upgrades.
10+ years assessing and enhancing IT security policies aligned with federal and international regulations.
10+ years of IT Security experience supporting A&A and ATO, including classified systems.
Strong working knowledge of: NIST SP 800-53 NIST SP 800-37 (RMF) Security Authorization processes
Bachelor's degree.
Minimum two (2) of the following certifications: CISA CRISC CISM CGEIT CISSP CAP
Active Top Secret clearance.

Nice To Haves

Apply NIST SP 800-37 RMF using JCAM (preferred) or equivalent systems.

Responsibilities

Serve as the Lead ATO Subject Matter Expert for classified and unclassified systems.
Lead system security assessments, RMF activities, and A&A/ATO efforts through successful authorization.
Develop, review, and maintain system security documentation including SSPs, SARs, POA&Ms, and authorization packages.
Provide expert guidance on NIST SP 800-53 control selection, implementation, and assessment.
Lead security assessments for live networks, enterprise systems, databases, and cloud-integrated environments.
Advise stakeholders on security policy compliance aligned with federal and international standards.
Support security upgrades, remediation activities, and continuous monitoring.
Coordinate with Authorizing Officials (AOs), ISSOs, ISSEs, and system owners.
Apply NIST SP 800-37 RMF using JCAM (preferred) or equivalent systems.
Mentor junior ATO and cybersecurity engineers.