Senior RMF Specialist/ISSO (Rock Island Arsenal, IL)

Akira Technologies Inc.• Rock Island, IL, US, IL

8d•$115,000 - $130,000•Onsite

About The Position

Akira Technologies is seeking a Senior RMF Specialist / Information Systems Security Officer (ISSO) to support the U.S. Army Materiel Command (AMC) at Rock Island Arsenal, Illinois. This role will provide senior-level cybersecurity and Risk Management Framework (RMF) expertise to guide DoD information systems through the full RMF lifecycle and achieve and maintain an Authority to Operate (ATO). The ideal candidate has extensive hands-on experience with DoD RMF processes, eMASS, vulnerability management, security assessments, and continuous monitoring. This individual will work closely with system owners, security teams, assessors, and Authorizing Officials to ensure systems meet applicable DoD cybersecurity requirements and maintain an effective security posture. This is an onsite position at the Rock Island Arsenal, IL. Security clearance of TS/SCI is required to support the role.

Requirements

5+ years of dedicated, hands-on DoD RMF/ATO experience supporting complex information technology systems.
Demonstrated experience executing the DoD Risk Management Framework throughout the full system lifecycle.
Extensive hands-on experience managing RMF activities and documentation in eMASS.
Experience with ACAS/Nessus, SCAP, and other vulnerability assessment and security compliance tools.
Working knowledge of COMSEC requirements and their application within DoD environments.
Current IAT Level II certification, at minimum, or equivalent qualification.
Industry-standard cybersecurity or technical certifications relevant to assigned duties, such as CompTIA Security+, CCNA, RHCSA, MCSA, or equivalent.
Certifications must meet applicable DoD 8570/8140 requirements for the assigned position.
Strong understanding of DoD cybersecurity policies, security controls, vulnerability management, and ATO processes.
Ability to develop and maintain comprehensive RMF documentation and communicate security risks effectively.
Active Top Secret/SCI security clearance and ability to maintain the required clearance.

Nice To Haves

Experience supporting U.S. Army programs, installations, or enterprise IT environments.
Experience working directly with Authorizing Officials, ISSMs/ISSO, Security Control Assessors (SCAs), and system owners.
Experience supporting ATO packages through assessment and authorization.
Familiarity with NIST SP 800-53, RMF, and applicable DoD cybersecurity policies and standards.
Experience with continuous monitoring and ongoing authorization activities in a DoD environment.

Responsibilities

Lead the full DoD Risk Management Framework (RMF) lifecycle, from system categorization and security control selection through implementation, assessment, authorization, and continuous monitoring.
Guide system owners and technical teams in meeting DoD cybersecurity, RMF, and ATO requirements for complex IT systems.
Develop, maintain, and update required RMF documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), and supporting artifacts.
Manage the system's security posture and RMF lifecycle within eMASS, ensuring records, controls, assessments, artifacts, and authorization data remain accurate and current.
Coordinate and support ATO packages, including preparation for security assessments, AO reviews, authorization decisions, and ongoing authorization activities.
Implement and manage continuous monitoring activities to evaluate security control effectiveness and maintain visibility into system risk.
Conduct, analyze, and track vulnerability assessments using ACAS/Nessus, SCAP, and other applicable security compliance and vulnerability scanning tools.
Identify, document, prioritize, and track security vulnerabilities and compliance findings through remediation and closure.
Support configuration management, security patching, and system changes, assessing their potential impact on the system's security posture and authorization status.
Serve as a senior cybersecurity advisor to System Owners, ISSMs/ISSO, Security Control Assessors, Authorizing Officials (AOs), and technical stakeholders.
Communicate system risks, vulnerabilities, compliance gaps, and ATO status while providing recommendations for effective risk mitigation.
Maintain awareness of applicable DoD cybersecurity policies, NIST SP 800-53, RMF requirements, COMSEC considerations, and DoD 8570/8140 requirements.