Senior IT Solutions Architect / Contract Manager (RMF) - Aberdeen Test Center

Senior IT Solutions Architect / Contract Manager (RMF)

Key personnel RMF lead and contract manager. U.S. Army Aberdeen Test Center, Aberdeen Proving Ground, Maryland. Fully onsite.

What this job actually is

You are the senior technical person and the contract manager on a team of two to four CyberMyte engineers. You hold the RMF lifecycle for four ATC networks and keep their authorizations current. The COR calls you first.

Roughly, and it will vary with the test schedule:

• About half your time is RMF and authorization work. Categorization, control selection, assessments, SCA support, POA&Ms and IAVM across all four networks, from Secret and below to the Top Secret work under ICD 503.
• About a quarter is engineering and architecture. Reviewing baseline changes, sitting on control boards, and planning for new technology and migration of existing capabilities.
• The rest is running the contract. Monthly financial deliverables, staffing, the Quality Control Program and the day-to-day relationship with the COR.

This job is a good fit if

• You have run RMF packages end to end and can explain an authorization decision to a Government lead in plain language.
• You came up as a server or network administrator and still like getting into the systems.
• You keep your own records straight, because the monthly reports depend on them.

This job is not a good fit if

• You want remote or hybrid. Telework on this contract is situational only.
• You want to manage people and stop doing the technical work.
• You want a large company structure around you. This is a small team with company leadership by phone.

About the contract

Aberdeen Test Center plans, runs and reports developmental and production tests for the Army, the rest of DoD and outside customers. It sits on roughly 70,000 acres of land and water at Aberdeen Proving Ground, with about 2,500 civilian, military and contractor staff.

The contract covers cybersecurity engineering and DoD Risk Management Framework support for four ATC networks: the ATC Local Area Network, the Logically Isolated Network, the Secure Test Environment and the Test and Evaluation Network. Secret and below systems follow DoDI 8510.01. Top Secret systems follow ICD 503. It is one base year plus four option years. The team is two core positions plus two surge positions the Army can turn on when it needs them. CyberMyte is bidding as the prime contractor.

Responsibilities

RMF lifecycle

• Categorize ATC systems and define system boundaries. Gather mission, roles, operating environment and interconnection information.
• Select security controls based on categorization, then implement them on the systems.
• Assess controls and run verification and validation to confirm they work as intended.
• Support Security Control Assessor visits, assessments and other authorization activities.
• Run continuous monitoring to keep each ATO current, including POA&M upkeep and IAVM compliance.

Engineering and configuration management

• Review proposed engineering changes to hardware and software baselines for security, performance and interoperability impact.
• Support configuration management and the review and control boards the Government runs.
• Analyze defects and incident reports in the defect tracking system and validate what was reported.
• Reconcile hardware and software inventories against the approved baseline.
• Provide system-wide architecture support for software baseline requirements and design, including emerging technologies and migration of existing capabilities.

Contract management

• Act for CyberMyte on all contract matters tied to daily operations, and be available 8:00 a.m. to 4:30 p.m. Eastern, Monday through Friday.
• Deliver the Monthly Funding Balance Statement, Monthly Invoice, Monthly Invoice Reconciliation Report and Monthly Spend Plan by the 5th of each month, within 1 percent of the financial data.
• Run the Quality Control Program, key control and lock combination procedures, and the telework plan.
• Lead the 30 day phase-in so the team is fully operational on schedule.
• Coordinate surge staffing when the Army turns on the surge positions.

Required qualifications

Citizenship, clearance and certification

• United States citizen. No exceptions for on-installation federal contract work.
• Active Secret clearance (Tier 3 investigation) when we submit the bid, held for the life of the contract, with the ability to hold a SIPRNet account.
• CISSP, held when we submit the bid. Any additional baseline certification DoD 8570/8140 requires for the role must be in hand at contract award. We cannot bid on a promise to certify later.

Technical experience

• At least 10 years managing RMF lifecycle reporting.
• At least 5 years supporting progressive network expansion and cloud or enclave work.
• Prior experience as a server administrator or network administrator.
• Demonstrated work with DoD RMF policy and practice, security audits, risk assessment, DISA STIG compliance, NIST special publications and FISMA compliance.
• Experience managing networks across Windows, Linux and Apple platforms.
• Experience in both unclassified and classified environments, including Secret level systems.

Work style

• Strong writing. Authorization packages and monthly reports go to Government leadership with your name on them.
• Able to work onsite with limited supervision and set the team's priorities.
• Comfortable telling a Government lead what a control actually requires, politely and in writing.

Preferred qualifications

• Active Top Secret clearance and ICD 503 experience.
• Experience with eMASS.
• Prior work at Aberdeen Proving Ground or another Army test and evaluation organization.
• Experience as an ISSM or ISSO.

How CyberMyte supports this role

We are making these commitments in writing because we learned they matter. We arrange everything below before your first day, not after.

• A written task list on day one. The Performance Work Statement spells out the tasks. You will have them in writing, with priorities, before you walk in.
• The tools to do the job. The Government provides workspace, laptops, program documents, archives and SOPs. We make sure you have them.
• A weekly check-in with company leadership. CyberMyte is small. You will have a direct line to the CEO, not three layers of management.
• Certifications paid, including renewals, and a $5,000 annual training stipend you direct yourself.

Schedule, environment and conditions

ATC works an alternate work schedule under ATC Regulation 690-9, and you work that schedule. Federal holidays are observed. Test support sometimes needs you outside normal hours, at designated ATC sites, with as little as one hour of notice. The contract is firm fixed price with a set number of hours per position, so after-hours work is offset with flexed hours rather than paid at a premium.

The work is fully onsite at Aberdeen Test Center. Telework is situational only, for things like weather closures or an installation closure, and only under a telework plan the COR has approved. The Government provides your workspace, laptop and network access. Reliable personal transportation to the installation is required. CyberMyte handles Army Account Validation System registration and base access processing before your start date. Within 30 days of starting, you complete Antiterrorism Level 1 training, the DoD Cybersecurity Awareness Challenge and the Army IT User Agreement.

Compensation and benefits

• Salary: $150,000 to $175,000 annually, based on experience and clearance status.
• Health: Individual Coverage Health Reimbursement Arrangement. CyberMyte funds a monthly tax-free allowance you direct toward the individual medical, dental and vision plan that fits your family.
• Retirement: 401(k) accepting employee contributions. An employer match is under evaluation for a future plan year and is not offered today.
• Bonus: Annual performance bonus based on individual contribution and company performance.
• Training: $5,000 annual stipend, directed by you. All job-related certifications and renewals reimbursed.
• Time off: Paid time off plus federal holidays.

CyberMyte, LLC is an Equal Opportunity Employer and a Service-Disabled Veteran-Owned Small Business. Veterans and transitioning service members are strongly encouraged to apply.

How to apply

Apply through this posting, or email job@cybermyte.io with the subject line "ATC Solutions Architect Application." In your message, tell us four things:

• Your current clearance level and status.
• Your CISSP and its expiration date.
• Your earliest realistic start date.
• Whether you agree to be named, with your resume, in our bid.

A cover letter is welcome but not required. We would rather read about one ATO you got across the line than a page of adjectives. We contact candidates selected for interview within five business days.

Please do not send clearance documentation yet. CyberMyte processes its own personnel security actions through DISS. Do not send clearance paperwork, investigation records or personal identifiers until CyberMyte requests them after a conditional offer.