Senior RMF Specialist/ISSO (Rock Island Arsenal, IL)

Published: 6/14/2022

Technology

Job Description

Akira Technologies is seeking a Senior RMF Specialist / Information Systems Security Officer (ISSO) to support the U.S. Army Materiel Command (AMC) at Rock Island Arsenal, Illinois. This role will provide senior-level cybersecurity and Risk Management Framework (RMF) expertise to guide DoD information systems through the full RMF lifecycle and achieve and maintain an Authority to Operate (ATO).

The ideal candidate has extensive hands-on experience with DoD RMF processes, eMASS, vulnerability management, security assessments, and continuous monitoring. This individual will work closely with system owners, security teams, assessors, and Authorizing Officials to ensure systems meet applicable DoD cybersecurity requirements and maintain an effective security posture.

This is an onsite position at the Rock Island Arsenal, IL. Security clearance of TS/SCI is required to support the role.

Job Responsibilities

Lead the full DoD Risk Management Framework (RMF) lifecycle, from system categorization and security control selection through implementation, assessment, authorization, and continuous monitoring.
Guide system owners and technical teams in meeting DoD cybersecurity, RMF, and ATO requirements for complex IT systems.
Develop, maintain, and update required RMF documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), and supporting artifacts.
Manage the system's security posture and RMF lifecycle within eMASS, ensuring records, controls, assessments, artifacts, and authorization data remain accurate and current.
Coordinate and support ATO packages, including preparation for security assessments, AO reviews, authorization decisions, and ongoing authorization activities.
Implement and manage continuous monitoring activities to evaluate security control effectiveness and maintain visibility into system risk.
Conduct, analyze, and track vulnerability assessments using ACAS/Nessus, SCAP, and other applicable security compliance and vulnerability scanning tools.
Identify, document, prioritize, and track security vulnerabilities and compliance findings through remediation and closure.
Support configuration management, security patching, and system changes, assessing their potential impact on the system's security posture and authorization status.
Serve as a senior cybersecurity advisor to System Owners, ISSMs/ISSO, Security Control Assessors, Authorizing Officials (AOs), and technical stakeholders.
Communicate system risks, vulnerabilities, compliance gaps, and ATO status while providing recommendations for effective risk mitigation.
Maintain awareness of applicable DoD cybersecurity policies, NIST SP 800-53, RMF requirements, COMSEC considerations, and DoD 8570/8140 requirements.

Job Qualifications

5+ years of dedicated, hands-on DoD RMF/ATO experience supporting complex information technology systems.
Demonstrated experience executing the DoD Risk Management Framework throughout the full system lifecycle.
Extensive hands-on experience managing RMF activities and documentation in eMASS.
Experience with ACAS/Nessus, SCAP, and other vulnerability assessment and security compliance tools.
Working knowledge of COMSEC requirements and their application within DoD environments.
Current IAT Level II certification, at minimum, or equivalent qualification.
Industry-standard cybersecurity or technical certifications relevant to assigned duties, such as CompTIA Security+, CCNA, RHCSA, MCSA, or equivalent.
Certifications must meet applicable DoD 8570/8140 requirements for the assigned position.
Strong understanding of DoD cybersecurity policies, security controls, vulnerability management, and ATO processes.
Ability to develop and maintain comprehensive RMF documentation and communicate security risks effectively.
Active Top Secret/SCI security clearance and ability to maintain the required clearance.

Preferred Qualifications

Experience supporting U.S. Army programs, installations, or enterprise IT environments.
Experience working directly with Authorizing Officials, ISSMs/ISSO, Security Control Assessors (SCAs), and system owners.
Experience supporting ATO packages through assessment and authorization.
Familiarity with NIST SP 800-53, RMF, and applicable DoD cybersecurity policies and standards.
Experience with continuous monitoring and ongoing authorization activities in a DoD environment.

Salary Range: $115,000 - $130,000

Akira’s pay range for this position considers various factors including skills, years of experience, training, licenses, certifications, alignment with market data, and internal equity in the organization. This pay range estimate is a general guideline only and not a guarantee of compensation or salary, which Akira believes to be done in good faith in compliance with local laws. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. It is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case.

General Description of Benefits

Akira offers its employees multiple options for medical plans (some with Health Savings Account), dental plans, and vision coverage, and a 401(k) plan with employer match. To promote work/life balance, Akira offers paid time off, including vacation and sick time, holidays, paid parental leave, military leave, bereavement leave, and jury duty leave. We also offer short and long-term disability benefits to protect employee income in the event of sickness or injury, life insurance, accidental death and dismemberment insurance, and critical illness insurance. Akira also offers tuition, training, and certification reimbursement for professional development and career advancement.

Akira regularly reviews our total rewards package to ensure our offerings remain competitive and reflect the values and needs expressed by our employees.

About Akira Technologies

Akira strives to meet and exceed the mission and objectives of US federal agencies. As a leading small business cloud modernization and data analytics services provider, we deliver trusted and highly differentiated solutions and technologies that serve the needs of our customers and citizens. Akira serves as a valued partner to essential government agencies across the intelligence, cyber, defense, civilian, and health markets. Every day, our employees deliver transformational outcomes, solving the most daunting challenges facing our customers.

Akira is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.