IT Sys Solutions Architect - Sr. Level

Job DescriptionServes as the contractor's Key Personnel and Contract Manager for ATC Cybersecurity Engineering and RMF support. Leads the cybersecurity/RMF program for ATC information systems and enclaves, owns the RMF lifecycle and authorization reporting, directs the IT Certified Professional(s) and any surge staff, and is the primary technical and management interface with the COR and Contracting Officer.

MINIMUM QUALIFICATIONS CISSP

certification (current, in good standing). Minimum 10 years of working experience managing RMF lifecycle reporting. Per Q&A #10, may include DIACAP-to-RMF transition work, provided a significant portion is RMF; experience must be DoD (non-DoD Fed

RAMP / NIST 800-53

work does not count). Minimum 5 years of progressive experience (progressive levels of responsibility and exposure to operating systems and environments) with network expansion and cloud/enclaves.

must reflect experience with:

DoD RMF policies and practices; security audits; risk assessment practices;

DISA STIG

compliance; NIST Special Publications; FISMA compliance. Former experience as a Server Administrator or Network Administrator.

DUTIES AND RESPONSIBILITIES

Lead execution of the DoD RMF lifecycle (DoDI 8510.01) for ATC systems and enclaves - categorization, control selection, implementation, assessment, authorization, and continuous monitoring. Develop, maintain, and submit authorization packages and lifecycle reporting (System Security Plans, Security Assessment Reports, POA&Ms, risk assessments) in eMASS and support

ATO/IATT

decisions by the AO. Architect security for network expansion and cloud/enclave efforts, ensuring designs meet

NIST SP 800-53/800-37, DISA

STIG/SRG, and DoD Cloud Computing SRG requirements before deployment. Plan and lead security audits, vulnerability assessments, and STIG compliance reviews; track findings to closure and brief residual risk to Government leadership. Ensure FISMA reporting and Army cybersecurity compliance (AR 25-2), including IAVA/IAVM, ACAS/Tenable results, and

HBSS/ESS

posture w applicable. Direct and quality-check the work of the IT Certified Professional-Sr and surge staff; assign tasks, review artifacts, and manage surge onboarding when the Government exercises surge CLINs. Verify that all contractor cyber personnel meet DoDM 8140.03 qualification requirements and maintain certifications and continuing education.

KNOWLEDGE, SKILLS, AND TOOLS

Deep knowledge of DoD RMF, DoDI 8510.01, DoDI 8500.01, NIST

SP 800-37/53/53A/137, CNSSI 1253, FISMA.

Hands-on administration background (Windows/Linux server or network) sufficient to evaluate technical implementations and STIG findings. e

MASS , STIG

er/SCAP, ACAS/Nessus; cloud and enclave security architecture. Ability to brief senior Government stakeholders and manage a small technical team on an FFP contract.