Senior ATO Subject Matter Expert

Innosoft Corporation•Washington, DC

14h•Onsite

About The Position

We are seeking a Senior Authorization to Operate (ATO) Subject Matter Expert to serve as Key Personnel on a critical DOJ Federal Bureau of Prisons IT Cyber Security Support Services contract. This role leads all ATO lifecycle activities across BOP's enterprise IT environment, ensuring full compliance with FISMA, NIST Risk Management Framework (RMF), and DOJ-specific security requirements including JCAM.

Requirements

U.S. CITIZENSHIP REQUIRED — No Exceptions (No Dual Citizens, No Green Cards, No Visa Holders)
PUBLIC TRUST + SUITABILITY CLEARANCE REQUIRED (active or ability to obtain)
DRUG TESTING MANDATORY — Urinalysis required at BOP facility
BACKGROUND INVESTIGATION — Full federal background check including fingerprinting, credit check, criminal history
Bachelor's degree in Cybersecurity, IT, Computer Science, or related field (Master's preferred)
Minimum 10 years hands-on ATO/RMF experience in federal environments
Minimum 5 years specifically supporting DOJ or federal law enforcement ATO processes
NIST Risk Management Framework (RMF) — Expert-level
NIST SP 800-53 Rev 5 — Security and Privacy Controls
NIST SP 800-37 Rev 2 — RMF for Information Systems
FISMA Compliance and Reporting
JCAM (Justice Cybersecurity Architecture and Management)
FedRAMP — Cloud Security Authorization
SSP, SAR, POA&M development and management
Vulnerability scanning tools (Tenable Nessus, Qualys, or equivalent)
GRC platforms (CSAM, Xacta, eMASS, or equivalent)
SCAP/STIG compliance and hardening standards

Nice To Haves

CISSP (Certified Information Systems Security Professional)
CAP (Certified Authorization Professional) — Highly Preferred
CISM, CRISC, Security+ CE

Responsibilities

Lead end-to-end ATO lifecycle management for all BOP information systems — from categorization through continuous monitoring
Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms)
Conduct security control assessments aligned with NIST SP 800-53 Rev 5
Manage continuous monitoring programs including vulnerability scanning, configuration audits, and automated compliance checks
Serve as primary liaison between BOP CISO office, system owners, ISSOs, and DOJ authorization officials
Prepare and present ATO packages to Authorizing Officials (AOs)
Implement and manage RMF processes per NIST SP 800-37 Rev 2
Support POA&M remediation tracking and coordinate closure of audit findings within SLA
Lead compliance for FISMA reporting, FedRAMP cloud authorizations, and DOJ JCAM requirements
Mentor junior security analysts and ISSOs on ATO processes