RMF, Security & ATO Manager

🔥 1 hour ago

🐊 Florida – Remote

🐊 Florida – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Latitude IT Solutions | SDVOSB

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2021

🤝 B2B

💼 Consulting

🏛️ Government

B2B • Consulting • Government

Latitude IT Solutions | SDVOSB is an SBA-certified Service-Disabled Veteran-Owned Small Business that provides user-centric, mission-driven IT solutions designed to accelerate business processes and enhance operational efficiency. The company emphasizes next-generation capabilities, flexible and extensible architectures for integration and expansion, and leverages modern technologies and methodologies to deliver innovative, mission-focused solutions — commonly targeted at organizational and government customers.

📋 Description

• Own the System Security Plan (SSP), POA&M, and all ATO documentation maintained in eMASS • Manage the full RMF lifecycle under NIST SP 800-37 Rev. 2 and NIST SP 800-53 Rev. 5, including annual control assessments and continuous monitoring • Serve as primary liaison with the VA ISSO, Security Controls Assessor, and Authorizing Official • Maintain HSPD-12/PIV compliance (IAL3/AAL3/FAL3) and VA IAM/MPI integration; ensure all personnel access meets PIV requirements within 10 business days of award • Coordinate FISMA and HIPAA compliance controls across all platform tenant applications; manage control inheritance documentation for sub-authorizations • Lead Fortify, Nessus, and continuous compliance monitoring; partner with DevSecOps Director to enforce ATO controls at the pipeline level • Maintain the Incident Response Plan (IRP) and Disaster Recovery Plan (DRP); lead annual tabletop exercises • Maintain the Policy Change Register; distribute VA policy, NIST guidance, and TRM updates within 24 hours of receipt

🎯 Requirements

• 7+ years of federal cybersecurity/RMF experience with hands-on ATO ownership (not advisory) on a VA or federal health IT system • Expert-level knowledge of NIST SP 800-53 Rev. 5 and NIST SP 800-37 Rev. 2 • Direct eMASS experience: SSP authoring, control implementation statements, POA&M management • PIV/HSPD-12 compliance and FICAM architecture experience • HIPAA Security Rule controls mapped to NIST 800-53 families • Active Dept of Veteran Affairs PIV credentials • Preferred • CISSP certification • CAP (Certified Authorization Professional) • Prior VA OIT ATO experience • VA CDM, SNOWCAM, or VA continuous monitoring tooling experience • Multi-tenant tiered authorization (system of systems ATO) experience

🏖️ Benefits

• Medical, Vision, Dental • Paid Vacation & Sick Time • Paid Federal Holidays • 401k Retirement Plan with 100% Company Matching • Employer Paid Life Insurance • Continued Education Assistance • Employee Assistance Program (EAP) • Commuter Benefits Program • Health Savings Account (HSA)