RMF, Cybersecurity, and ATO Consultant

Team: CTIO

Location: Pentagon, DC

Commitment: Full Time - Exempt

Workplace Type: onsite

What you will be doing:

Provide expertise to evaluate, assess and make recommendations to address DoD and Intelligence Community (IC) Risk Management Framework and Authority to Operate (AO) policies and requirements at multiple classification levels (up to TS/SCI) to gain approval/recertification for pilot efforts related to digital capabilities, digital infrastructure, software applications. 
Support Security and Operations (DevSecOps), AI/ML algorithms and other digital services which includes identifying alternate strategies to manage risk to enterprise responsibilities while pursuing state of the art capabilities. 
Interfacing both remotely and in-person with various Department of the Air Force organizations in diverse geographic locales, as needed, to advise and assist on the advancement of cyber and infrastructure needs. This will include, but not limited to, in-person meetings at Langley-Eustis for meetings with ACC/CCC. 
Assisting S6C with collecting and advising on projects related to Zero Trust, base infrastructure modernization, cross-domain solutions, and USSF cyber resiliency. 
 
 
 

What you will need:

Bachelor’s Degree (Masters preferred) plus a minimum of 5 years of experience in analysis of program information system schemes or equivalent.
Strategic knowledge of the processes within DAF to formulate and execute technology-related projects 
Able to travel frequently or work remotely, when necessary, to assist and advise. 
TS/SCI Security Clearance 
 
 
 

Desired experience/qualifications:

Zero Trust:
Security Architecture & Engineering: 

• Deep understanding of Zero Trust principles and architectures. 

• Experience designing and implementing micro-segmentation, identity and access management (IAM), least privilege, and continuous monitoring solutions. 

• Familiarity with relevant security frameworks (NIST 800-207, DoD Zero Trust Reference Architecture). 

Network Security:
• Expertise in network segmentation, firewalls, intrusion detection/prevention systems (IDS/IPS), and network behavior analysis. 

• Knowledge of software-defined networking (SDN) and network function virtualization (NFV) for dynamic policy enforcement. 

Identity & Access Management: 

• Strong understanding of multi-factor authentication (MFA), single sign-on (SSO), role-based access control (RBAC), and privileged access management (PAM). 

• Experience with identity federation and directory services. 

Data Security: 

• Experience with data encryption, data loss prevention (DLP), and data classification. 

• Knowledge of data governance and compliance requirements relevant to space systems and operations. 

Base Infrastructure Modernization: 

Project Management: 

• Strong planning, organization, and communication skills to manage complex infrastructure modernization projects. 

Cross-Domain Solutions: 

• Systems Integration: 

• Expertise in integrating systems and data across different security domains and classification levels. 

• Understanding of cross-domain solutions (CDS) and guard technologies. 

• Network Security:

  • Knowledge of multi-level security (MLS) networks, boundary protection mechanisms, and data diodes. 

• Experience with secure data transfer protocols and encryption technologies. 

USSF Cyber Resiliency: 

• Threat Intelligence: 

  • Understanding of current cyber threats targeting space systems and infrastructure. 

• Ability to analyze threat intelligence and translate it into actionable security measures. 

• Vulnerability Management: 

• Expertise in vulnerability scanning, penetration testing, and red teaming. 

• Ability to identify, prioritize, and remediate security vulnerabilities in space systems and ground segments. 

• Collaboration: 

• Ability to work with multidisciplinary teams, including space and cyber experts. 

General Skills: 

• Strong understanding of space systems, operations, and architectures. 

• Excellent communication, collaboration, and problem-solving skills. 

• Ability to adapt to rapidly evolving technologies and threats. 

• Strong work ethic and commitment to national security.