Senior RMF Cybersecurity Engineer; Top Secret, ICD ; Aberdeen Test Center

Top Secret authorization role under ICD 503. U.S. Army Aberdeen Test Center, Aberdeen Proving Ground, Maryland. Fully onsite.

Read this part first.

This job depends on Cyber Myte winning the contract. The Army is buying this work through sealed bidding, and your resume goes in with our bid. The Army checks every resume against hard minimums, and one resume that misses a minimum can sink the whole bid. So before we submit, we need to confirm you meet every gate below, and we need your written permission and a signed letter of intent.

The Army expects to award in November 2026. If we do not win, there is no job. We will tell you either way.

This is the surge seat. The Army turns it on when it needs Top Secret support, so the start date is not fixed. We still name you in the bid. If you need a guaranteed start date, tell us up front.

You handle authorization work for ATC's Top Secret systems under ICD 503. When the Top Secret work is light, you back up the RMF team on Secret and below systems.

Roughly, and it will depend on when the Army needs you:

• Most of your time is Top Secret lifecycle documentation. Building and maintaining the packages, evidence and POA&Ms for Top Secret systems.
• A good share is assessment support. Getting systems ready for assessment and working findings to closure.
• The rest is backing up the RMF team on Secret and below systems across the four ATC networks.

• You have done Top Secret authorization work under ICD 503 and know how it differs from DoD RMF.
• You are fine with a start date that depends on Army demand.
• You write things down without being asked.

• You want remote or hybrid. Telework on this contract is situational only.
• You need a guaranteed start date.
• Your Top Secret clearance is not active today.

Aberdeen Test Center plans, runs and reports developmental and production tests for the Army, the rest of DoD and outside customers. It sits on roughly 70,000 acres of land and water at Aberdeen Proving Ground, with about 2,500 civilian, military and contractor staff.

The contract covers cybersecurity engineering and DoD Risk Management Framework support for four ATC networks: the ATC Local Area Network, the Logically Isolated Network, the Secure Test Environment and the Test and Evaluation Network. Secret and below systems follow DoDI 8510.01. Top Secret systems follow ICD 503. It is one base year plus four option years. The team is two core positions plus two surge positions the Army can turn on when it needs them.

Cyber Myte is bidding as the prime contractor.

Who directs your work. You report to Cyber Myte. The ATC Contracting Officer's Representative and Technical Point of Contact are the Government's points of contact for the work itself, and you will coordinate with them and the ATC cybersecurity staff on technical priorities. Time, leave, schedule changes, task priority, pay and performance all run through Cyber Myte.

• Identify, assess, analyze, document and audit cybersecurity requirements for Top Secret systems under ICD 503.
• Maintain lifecycle documentation for Top Secret environments, including packages, evidence and POA&Ms.
• Support assessments and authorization activities for Top Secret systems.

• Categorize ATC systems and define system boundaries. Gather mission, roles, operating environment and interconnection information.
• Select security controls based on categorization, then implement them on the systems.
• Assess controls and run verification and validation to confirm they work as intended.
• Support Security Control Assessor visits, assessments and other authorization activities.
• Run continuous monitoring to keep each ATO current, including POA&M upkeep and IAVM compliance.

• United States citizen. No exceptions for on-installation federal contract work.
• Active Top Secret clearance (Tier 5 investigation), held for the life of the contract.
• CASP+ (now SecurityX) or an equivalent DoD 8570/8140 baseline certification, held when we submit the bid. We cannot bid on a promise to certify later.

• At least 3 years supporting lifecycle documentation for Top Secret environments.
• At least 5 years supporting RMF lifecycle reporting and software and hardware reconciliation.
• Working knowledge of ICD 503, DoDI 8510.01 and NIST SP 800-53.
• Experience managing…