Senior RMF Specialist​/ISSO; Rock Arsenal, IL

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Rock Island, IL, US

3 days ago Requisition

Salary Range: $ To $ Annually

Akira Technologies is seeking a Senior RMF Specialist / Information Systems Security Officer (ISSO) to support the U.S. Army Materiel Command (AMC) at Rock Island Arsenal, Illinois. This role will provide senior-level cybersecurity and Risk Management Framework (RMF) expertise to guide DoD information systems through the full RMF lifecycle and achieve and maintain an Authority to Operate (ATO).

The ideal candidate has extensive hands-on experience with DoD RMF processes, eMASS, vulnerability management, security assessments, and continuous monitoring. This individual will work closely with system owners, security teams, assessors, and Authorizing officials to ensure systems meet applicable DoD cybersecurity requirements and maintain an effective security posture.

This is an onsite position at the Rock Island Arsenal, IL. Security clearance of TS/SCI is required to support the role.

Job Responsibilities

• Lead the full DoD Risk Management Framework (RMF) lifecycle, from system categorization and security control selection through implementation, assessment, authorization, and continuous monitoring.
• Guide system owners and technical teams in meeting DoD cybersecurity, RMF, and ATO requirements for complex IT systems.
• Develop, maintain, and update required RMF documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), and supporting artifacts.
• Manage the system's security posture and RMF lifecycle within eMASS, ensuring records, controls, assessments, artifacts, and authorization data remain accurate and current.
• Coordinate and support ATO packages, including preparation for security assessments, AO reviews, authorization decisions, and ongoing authorization activities.
• Implement and manage continuous monitoring activities to evaluate security control effectiveness and maintain visibility into system risk.
• Conduct, analyze, and track vulnerability assessments using ACAS/Nessus, SCAP, and other applicable security compliance and vulnerability scanning tools.
• Identify, document, prioritize, and track security vulnerabilities and compliance findings through remediation and closure.
• Support configuration management, security patching, and system changes, assessing their potential impact on the system's security posture and authorization status.
• Serve as a senior cybersecurity advisor to System Owners, ISSMs/ISSO, Security Control Assessors, Authorizing Officials (AOs), and technical stakeholders.
• Communicate system risks, vulnerabilities, compliance gaps, and ATO status while providing recommendations for effective risk mitigation.
• Maintain awareness of applicable DoD cybersecurity policies, NIST SP 800-53, RMF requirements, COMSEC considerations, and DoD 8570/8140 requirements.

Job Qualifications

• 5+ years of dedicated, hands-on DoD RMF/ATO experience supporting complex information technology systems.
• Demonstrated experience executing the DoD Risk Management Framework throughout the full system lifecycle.
• Extensive hands‑on experience managing RMF activities and documentation in eMASS.
• Experience with ACAS/Nessus, SCAP, and other vulnerability assessment and security compliance tools.
• Working knowledge of COMSEC requirements and their application within DoD environments.
• Current IAT Level II certification, at minimum, or equivalent qualification.
• Industry‑standard cybersecurity or technical certifications relevant to assigned duties, such as CompTIA…