Senior IT Systems Solutions Architect / Cybersecurity RMF Lead
Creative Visions Harford County, Maryland, United States
Events Services · 11-50 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The candidate will lead cybersecurity engineering and RMF activities for U.S. Army information systems, ensuring compliance with DoD policies. They will serve as the primary technical lead and contract manager, overseeing security documentation, vulnerability remediation, and stakeholder coordination.
What they look for
Requirements
Applicants must have at least 10 years of experience in RMF lifecycle management and hold an active Secret security clearance. A CISSP certification is required, along with extensive knowledge of NIST standards and DISA STIG implementation.
Full description
Position Overview
Creative Visions is seeking an experienced Senior IT Systems Solutions Architect / Cybersecurity RMF Lead to support a prospective U.S. Army cybersecurity engineering and Risk Management Framework (RMF) program at Aberdeen Proving Ground, Maryland.
The selected candidate will provide technical leadership and oversight of cybersecurity engineering, RMF implementation, and continuous monitoring activities supporting Department of Defense (DoD) information systems. This position will serve as the primary technical lead and Contract Manager, coordinating cybersecurity activities, managing technical deliverables, and ensuring compliance with applicable DoD cybersecurity policies and federal security requirements.
The ideal candidate brings extensive hands-on experience managing the DoD RMF lifecycle, supporting Authority to Operate (ATO) processes, implementing security controls, and advising Government stakeholders on cybersecurity risk and system security architecture.
Key Responsibilities
- Lead and coordinate cybersecurity engineering and DoD RMF activities supporting Army information systems.
- Manage RMF lifecycle activities, including security categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
- Develop, review, and maintain cybersecurity authorization documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting artifacts.
- Conduct security risk assessments, vulnerability analysis, and compliance evaluations.
- Evaluate system configurations against applicable DISA Security Technical Implementation Guides (STIGs) and DoD cybersecurity requirements.
- Support remediation planning and track security vulnerabilities through resolution.
- Provide cybersecurity engineering guidance for network expansion, infrastructure modernization, cloud environments, and system enclaves.
- Coordinate with Government stakeholders, system owners, Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), and technical teams.
- Support ATO development, maintenance, and continuous authorization activities.
- Oversee the quality, accuracy, and timely submission of cybersecurity deliverables.
- Serve as the primary contractor representative for day-to-day program operations.
- Coordinate personnel activities, technical priorities, schedules, and contract performance requirements.
- Provide technical recommendations to strengthen system security posture and maintain compliance with DoD cybersecurity policies.
Required Qualifications
Education and Experience
- Minimum 10 years of professional experience managing RMF lifecycle reporting and cybersecurity authorization activities.
- Minimum 5 years of progressive experience supporting network expansion, cloud environments, and/or system enclaves.
- Demonstrated experience implementing and maintaining DoD RMF requirements.
- Extensive knowledge of NIST Special Publications, particularly NIST SP 800-37 and NIST SP 800-53.
- Experience conducting cybersecurity risk assessments, security audits, and compliance evaluations.
- Hands-on experience with DISA STIG implementation and compliance validation.
- Working knowledge of FISMA requirements and federal cybersecurity compliance.
- Strong technical background in enterprise networking, server infrastructure, and systems administration.
- Excellent technical writing, communication, and stakeholder coordination skills.
Required Certification
- Certified Information Systems Security Professional (CISSP) — Required.
Security Clearance
- Active Secret security clearance required at the time of application.
- Must be eligible to maintain access to DoD information systems and classified environments.
Preferred Qualifications
- Previous experience supporting U.S. Army or other DoD cybersecurity programs.
- Prior experience as a Server Administrator or Network Administrator.
- Experience using DoD RMF authorization and compliance management tools.
- Familiarity with eMASS, ACAS, SCAP, and STIG Viewer.
- Experience supporting SIPRNet environments.
- Experience serving as a technical lead, cybersecurity architect, or contract manager.
- Familiarity with DoD cybersecurity workforce qualification requirements under DoD 8140.
Work Environment
This position supports cybersecurity operations at Aberdeen Proving Ground, Maryland. Candidates must be willing and able to work onsite as required by the Government. Remote or hybrid arrangements may be considered only if authorized under the resulting contract.
About Creative Visions
Creative Visions, LLC is an SBA 8(a)-certified, Woman-Owned Small Business specializing in cybersecurity engineering, security operations, risk management, and federal cybersecurity compliance. We support federal agencies with mission-focused cybersecurity solutions that strengthen enterprise security, improve operational resilience, and maintain regulatory compliance.
Cybersecurity. Engineered for Mission Success.
Equal Employment Opportunity
Creative Visions, LLC is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other legally protected characteristic.
This position is contingent upon contract award.
Similar roles
-
Security Engineer
Cermati.com Special capital Region of Jakarta, Java, Indonesia
-
Staff Security Engineer - Detection and Response Team
Rippling Bengaluru, Karnataka, India
-
IT Security Engineer
Alpaca Hidalgo del Parral, Chihuahua, Mexico
-
AI Security Engineer
Alpaca Hidalgo del Parral, Chihuahua, Mexico
-
IAM Security Engineer - Okta
The Missing Link Sydney, New South Wales, Australia
-
Cybersecurity Analyst Intern
CAI United States · $42K/yr