RMF / ATO Automation Lead

Job Overview & Responsibilities

The RMF / ATO Automation Lead is a senior technical and compliance leader responsible for owning and executing the full Risk Management Framework (RMF) accreditation lifecycle for a mission‑critical enclave. This role leads the implementation of DoD and Intelligence Community security controls, drives ATO and continuous ATO (cATO) efforts, and modernizes compliance through automation and DevSecOps practices. The ideal candidate brings deep experience operating in IL5/IL6 environments and can bridge security, engineering, and compliance teams to achieve scalable, audit‑ready outcomes.

Key Responsibilities

• Lead the end‑to‑end RMF accreditation and ATO lifecycle for assigned enclaves, including initial ATO and continuous ATO (cATO).
• Implement and assess security controls in accordance with CNSSI 1253, NIST SP 800‑171, and NIST SP 800‑53 / 800‑59 as applicable.
• Author, maintain, and update RMF documentation including System Security Plans (SSPs), POA&Ms, security assessments, and supporting artifacts.
• Manage ATO submission packages and navigate eMASS approval chains, coordinating with ISSOs, ISSEs, AO representatives, and government stakeholders.
• Design and implement automation strategies to streamline compliance, control validation, evidence collection, and continuous monitoring.
• Support DevSecOps‑driven cATO processes, integrating security controls into CI/CD pipelines.
• Lead and support continuous monitoring activities, including vulnerability management, log analysis, and control effectiveness reporting.
• Architect and support Identity and Access Management (IAM) federation solutions within Oracle Cloud Infrastructure (OCI).
• Partner with engineering, cloud, and security teams to ensure RMF requirements are embedded into system architecture and operational processes.
• Provide expert guidance on operating in IL5/IL6 classified and regulated cloud environments.

Qualifications

• Security Clearance: US citizenship with the ability to obtain a Secret security clearance
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field (or equivalent experience).
• 15+ years of experience supporting RMF, ATO, or cybersecurity compliance efforts within DoD or IC environments.
• Demonstrated experience leading ATO and/or cATO efforts for complex systems or enclaves.
• Hands‑on experience with eMASS, including package development, workflow management, and approvals.
• Proven experience supporting systems at Impact Level 5 (IL5) and/or Impact Level 6 (IL6).
• Ability to obtain and maintain a U.S. Government security clearance (active clearance preferred).

Knowledge/Skills/Abilities

• Deep expertise in RMF for DoD systems, including control implementation, assessment, and authorization.
• Strong working knowledge of eMASS, RMF workflows, and AO expectations.
• Experience automating security and compliance tasks using tools such as Ansible, Terraform, and SCAP tooling.
• Proficiency with cloud security in Oracle Cloud Infrastructure (OCI), including OCI Logging Analytics (OCI LA).
• Familiarity with containerized and cloud‑native environments, including Docker and Kubernetes.
• Experience integrating SIEM tools and log analytics to support continuous monitoring.
• Solid understanding of DevSecOps methodologies and embedding security into CI/CD pipelines.
• Strong documentation, communication, and stakeholder management skills, with the ability to translate compliance requirements into technical solutions.
• Ability to operate independently as a senior lead while mentoring junior RMF or security staff.

Company Overview

As a federal government contractor and a recipient of federal funding, Mythics and Emergent is required to abide by the Drug-Free Workplace Act, which requires Mythics and Emergent to provide a drug-free workplace, among other obligations.  As part of this effort, Mythics and Emergent requires pre-employment drug tests for all candidates for employment.  Please note that marijuana (including medical marijuana) is designated as a controlled substance under federal law and will be screened for in the drug test.

Why work at Mythics?

Because at Mythics, YOU count! At Mythics, our Corporate Values are at the foundation of everything we do. Our values, Respect – Empathy – Excellence – Fun (REEF), have created an environment that fosters creative thinking, respects your contributions, and accepts nothing less than excellence in serving our customers.  At Mythics, you will experience a truly enjoyable corporate culture. But don’t just take our word for it!