Cybersecurity/RMF Lead

Fire Creek Services Company, an All Native Group company, is seeking a Cybersecurity / RMF Lead to lead security authorization for a cloud-hosted maintenance management platform, including IL4/IL5 control implementation, RMF/ATO evidence, CUI protection and NIST SP 800-171 compliance, continuous monitoring and incident reporting. This is an immediate opening.

• Prepare and manage the security authorization package (SSP, POA&M and control evidence) in coordination with the Mission Owner and Authorizing Official.
• Implement identity, access and data controls (CAC/PIV federation, role separation, audit records and secrets management).
• Define operational technology (OT) segmentation for sensors, gateways and building controllers.
• Run vulnerability management, continuous monitoring and required incident reporting.
• Maintain NIST SP 800-171 evidence and support CMMC assessments.
• Deliver security awareness content for technicians and administrators.
• Run vulnerability scans on a regular, defined schedule and track remediation to closure.
• Review audit logs and security alerts and investigate suspicious activity.
• Perform security impact analysis on proposed system changes.

• RMF/ATO package development
• DoD cybersecurity controls
• Risk assessment and continuous monitoring
• Clear security communication and training
• Audit log review and threat analysis

None required for this position

Remote or office-based, computer-focused work, with periodic on-site travel to Fort Campbell, Kentucky.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Prolonged periods sitting at a desk and working on a computer.
• Must be able to lift up to 25 lb.
• Occasional walking of buildings and mechanical spaces during on-site security walkdowns.

Full-time and part-time positions available. Typical hours are Monday through Friday, daytime.

Periodic travel to Fort Campbell, Kentucky, for authorization meetings and operational technology walkdowns.

• 7+ years of DoD cybersecurity experience.
• 3+ years leading RMF/ATO packages (eMASS) through authorization.
• Authored ATO packages that were granted.
• Working knowledge of Azure Government or equivalent cloud security tooling.

• NIST SP 800-171 and CMMC assessments.
• Army authorization processes.
• OT/IoT security (NIST SP 800-82).
• Experience with ACAS/Nessus vulnerability scanning and DISA STIGs.
• Experience with SIEM tools (e.g., Microsoft Sentinel or Splunk).
• Experience working on Department of Defense (DoD) installations, contracts or programs is a plus.

Bachelor's degree in Cybersecurity, Information Systems or a related field.

• CISSP or CISM (DoD 8140 IAM Level II/III) required.
• CompTIA Security+ required at minimum.
• Must be able to pass a background check and obtain installation access.

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre-employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

None

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.