Cyberhill Partners is a professional services firm specializing in engineering future-state software solutions for Fortune 500 companies. Focusing on cybersecurity, cloud computing, data analytics, and AI, Cyberhill provides comprehensive implementation services that drive success and security. With over 800 complex cybersecurity implementations completed, Cyberhill is an established and trusted services partner.

The ideal candidate will have extensive experience navigating DoD authorization requirements and working directly with government stakeholders to successfully guide information systems through the RMF process. This individual will help Cyberhill and its government customers identify authorization requirements early, address compliance challenges, streamline documentation, and minimize delays associated with obtaining and maintaining ATOs.

This role requires someone who can independently lead authorization efforts while serving as a trusted advisor to government program managers, security personnel, and technical teams.

Key Responsibilities

ATO & RMF Management

• Serve as Cyberhill's primary subject matter expert on DoD ATO and RMF requirements across multiple government programs.
• Lead and coordinate RMF activities in accordance with DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, and applicable DoD cybersecurity policies.
• Manage the authorization lifecycle, including system categorization, security control selection, implementation oversight, assessment coordination, authorization package preparation, and continuous monitoring.
• Develop, review, and maintain authorization documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security control documentation.
• Manage authorization packages and associated workflows within Enterprise Mission Assurance Support Service (eMASS) and other applicable DoD authorization platforms.
• Coordinate with government Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), Security Control Assessors (SCAs), Authorizing Officials (AOs), and program leadership.
• Identify authorization dependencies, documentation gaps, compliance risks, and potential delays early in project execution.
• Support initial authorizations, reauthorizations, ongoing authorization activities, and continuous monitoring requirements.

Government Advisory & Stakeholder Engagement

• Serve as a trusted advisor to government customers navigating complex security authorization requirements.
• Provide guidance to government program managers and technical stakeholders on RMF responsibilities, authorization milestones, documentation requirements, and approval processes.
• Facilitate coordination between government security teams, program leadership, contractors, and technical personnel.
• Translate complex cybersecurity policies and authorization requirements into clear, actionable guidance for technical and nontechnical stakeholders.
• Identify and recommend practical solutions to authorization challenges that may delay government projects.
• Assist government customers in developing authorization roadmaps, preparing for security assessments, and understanding requirements for authorization decisions.
• Provide expert guidance while recognizing government-designated approval authorities and responsibilities.

Process Improvement & Internal Program Support

• Establish and maintain standardized RMF processes, templates, checklists, and best practices for Cyberhill government projects.
• Develop repeatable authorization workflows to improve consistency and efficiency across multiple programs.
• Provide early-stage RMF assessments and authorization planning support for new government projects.
• Advise Cyberhill leadership and project teams on authorization timelines, compliance risks, and resource requirements.
• Support proposal development and solution planning by identifying applicable security authorization requirements.
• Monitor changes to DoD cybersecurity policies, RMF guidance, and authorization procedures.
• Provide internal training and knowledge sharing to improve organizational understanding of ATO and RMF requirements.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or a related field, or equivalent professional experience.
• 7+ years of experience in cybersecurity, information assurance, RMF, or security authorization activities.
• Demonstrated experience leading or coordinating DoD systems through the RMF lifecycle, including initial ATO activities.
• Strong working knowledge of DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, and DoD cybersecurity requirements.
• Hands-on experience using eMASS to develop, manage, and maintain security authorization packages.
• Experience preparing and maintaining SSPs, SARs, POA&Ms, security control documentation, and other authorization artifacts.
• Experience working directly with government ISSMs, ISSOs, SCAs, and authorization stakeholders.
• Ability to independently manage multiple authorization efforts, identify roadblocks, and coordinate resolution across stakeholders.
• Strong understanding of security control assessments, vulnerability management, DISA STIG requirements, and continuous monitoring.
• Excellent written and verbal communication skills, including the ability to advise government leadership and nontechnical stakeholders.
• Active Secret security clearance.

Preferred Qualifications

• Active Top Secret clearance or TS/SCI eligibility.
• Previous experience serving as a DoD RMF Lead, ISSM, ISSO, Information System Security Engineer (ISSE), or security authorization subject matter expert.
• Demonstrated success leading one or more DoD systems through an initial ATO.
• Experience supporting multiple DoD programs or military service components.
• Familiarity with DoD cloud authorization requirements, including AWS GovCloud, Azure Government, or other approved cloud environments.
• Knowledge of FedRAMP, FISMA, and federal authorization requirements.
• Experience developing standardized RMF procedures and improving authorization efficiency across multiple programs.
• Relevant certifications such as CISSP, CGRC (formerly CAP), CISM, Security+, or equivalent credentials.
• Experience supporting government program offices and advising leadership on cybersecurity authorization strategy.

What Success Looks Like

The successful candidate will establish Cyberhill as a reliable, knowledgeable partner in navigating complex DoD security authorization requirements.

Key outcomes include:

• Reduced authorization delays through proactive planning and early identification of compliance requirements.
• Improved coordination between Cyberhill project teams and government authorization stakeholders.
• Consistent, high-quality RMF documentation and authorization packages.
• Standardized internal authorization processes that can be leveraged across multiple government programs.
• Increased government customer confidence in Cyberhill's ability to navigate and execute the RMF process.
• Successful progression of supported systems through authorization milestones and ongoing compliance requirements.