10+ years managing DoD RMF lifecycle reporting, including DIACAP-to-RMF transition.
5+ years of experience in network expansion and cloud or enclave environments.
Prior experience as a Server or Network Administrator.
Hands-on experience with DoD RMF policies, security audits, and compliance standards.
Responsibilities
Lead RMF planning and execution to secure Authority to Operate (ATO) for various networks.
Categorize systems and implement security controls per NIST SP 800-53 and DoDI 8510.01.
Support Security Control Assessor visits and authorization activities.
Manage continuous monitoring and maintenance of Plans of Action and Milestones (POA&M).
Review hardware and software changes for security impacts.
Support configuration management and participate in technical review boards.
Provide security architecture support for emerging technologies and capability migrations.
Benefits
Health Care Plan (Medical, Dental & Vision).
Retirement Plan (401K with employer matching).
Paid Time Off & 11 Paid Holidays.
Short and Long-Term Disability.
Healthy Work-Life Balance.
Training & Development.
Full Job Description
IT Systems Solutions Architect, Senior (RMF) Location: Aberdeen Proving Ground, MD (on-site, Aberdeen Test Center) Clearance: Active Secret required (Top Secret preferred) Employment type: Full-time, contingent upon contract award
About the role
Paragon Cyber Solutions is seeking a Senior IT Systems Solutions Architect to lead cybersecurity engineering and DoD Risk Management Framework (RMF). The role is the key person and on-site Contract Manager for the effort. You will lead RMF activities across ATC's networks, serve as the primary point of contact for the government, and guide a small team of cybersecurity professionals.
What you'll do
Lead RMF planning, execution and maintenance to obtain and sustain Authority to Operate (ATO) for the ATC LAN, Logically Isolated Network, Secure Test Environment and Test and Evaluation Network
Categorize systems, define boundaries, and select, implement and assess security controls under NIST SP 800-53 and DoDI 8510.01
Support Security Control Assessor (SCA) visits, assessments and authorization activities
Run continuous monitoring, POA&M maintenance and IAVM activities
Review proposed hardware and software baseline changes for security and interoperability impacts
Support configuration management and serve on technical review and control boards
Provide system-wide security architecture support, including emerging technologies and migration of existing capabilities
Support Top Secret enclave requirements under ICD 503 when directed
Act as Contract Manager, with full authority on day-to-day contract matters, available 8:00 AM to 4:30 PM, Monday through Friday
Oversee contract deliverables, including monthly financial and status reporting to the COR
Requirements
CISSP certification
Minimum 10 years of experience managing DoD RMF lifecycle reporting. DIACAP-to-RMF transition experience counts, with most of that time in RMF and all of it within DoD
Minimum 5 years of progressive responsibility for network expansion and cloud or enclave environments
Prior experience as a Server Administrator or Network Administrator
Hands-on experience with DoD RMF policies and practices, security audits, risk assessments, DISA STIG compliance, NIST special publications and FISMA compliance
Experience managing networks across multiple platforms (Windows, Linux, Apple) in unclassified and classified environments
Preferred qualifications
Active Top Secret clearance
Experience supporting ICD 503 authorizations
Prior experience supporting Army test and evaluation, ATEC or APG organizations
Experience leading or supervising a small technical team
