IT Sys Solutions Architect

Job Description

Serves as the contractor's Key Personnel and Contract Manager for ATC Cybersecurity Engineering and RMF support. Leads the cybersecurity/RMF program for ATC information systems and enclaves, owns the RMF lifecycle and authorization reporting, directs the IT Certified Professional(s) and any surge staff, and is the primary technical and management interface with the COR and Contracting Officer.

MINIMUM QUALIFICATIONS

• CISSP certification (current, in good standing).
• Minimum 10 years of working experience managing RMF lifecycle reporting.
• Minimum 5 years of progressive experience (progressive levels of responsibility and exposure to operating systems and environments) with network expansion and cloud/enclaves.
• Experience with: DoD RMF policies and practices; security audits; risk assessment practices; DISA STIG compliance; NIST Special Publications; FISMA compliance.
• Experience managing networks across multiple platforms (Windows/Linux/Apple) and security classification environments (Unclassified and Classified, including Secret-level).
• Available to start on-site 23 November 2026.

PREFERRED QUALIFICATIONS

• Former experience as a Server Administrator or Network Administrator.

DUTIES AND RESPONSIBILITIES

• Lead execution of the DoD RMF lifecycle (DoDI 8510.01) for ATC systems and enclaves - categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, maintain, and submit authorization packages and lifecycle reporting (System Security Plans, Security Assessment Reports, POA&Ms, risk assessments) in eMASS and support ATO/IATT decisions by the AO.
• Architect security for network expansion and cloud/enclave efforts, ensuring designs meet NIST SP 800-53/800-37, DISA STIG/SRG, and DoD Cloud Computing SRG requirements before deployment.
• Plan and lead security audits, vulnerability assessments, and STIG compliance reviews; track findings to closure and brief residual risk to Government leadership.
• Ensure FISMA reporting and Army cybersecurity compliance (AR 25-2), including IAVA/IAVM, ACAS/Tenable results, and HBSS/ESS posture where applicable.
• Direct and quality-check the work of the IT Certified Professional-Sr and surge staff; assign tasks, review artifacts, and manage surge onboarding when surge support is activated.
• Verify that all contractor cyber personnel hold and maintain the required certifications (CISSP or SecurityX/CASP+) and continuing education, and complete required DoD/Army cybersecurity training.

KNOWLEDGE, SKILLS, AND TOOLS

• Deep knowledge of DoD RMF, DoDI 8510.01, DoDI 8500.01, NIST SP 800-37/53/53A/137, CNSSI 1253, FISMA.
• Hands-on administration background (Windows/Linux server or network) sufficient to evaluate technical implementations and STIG findings.
• eMASS, STIG Viewer/SCAP, ACAS/Nessus; cloud and enclave security architecture.
• Ability to brief senior Government stakeholders and manage a small technical team.