Cybersecurity & ATO Specialist

Koniag IT System, LLC, a Koniag Government Services company, is seeking a Cybersecurity & ATO Specialist with a TS/SCI security clearance to support KITS and our government customer at Langley Air Force Base, Hampton, VA.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

The Cybersecurity Specialist will be responsible for the implementation of AI/RPA Platforms, systems, and data for the Air Combat Command (ACC) - Accelerated AI Support (AAIS) program, providing technical leadership, security management expertise, and Authority to Operate (ATO) process oversight. This role requires deep expertise in DoD cybersecurity frameworks, risk management, and the secure integration of AI/RPA technologies across both classified and unclassified environments while ensuring compliance with federal cybersecurity regulations and DoD standards.

Essential Job Functions:
AI/RPA Platform Implementation & Security Management
• Support technical implementation of AI/RPA platform phases across ACC enterprise
• Manage security aspects of AI/RPA platform deployment and integration
• Recommend system architecture alternatives considering security, functionality, and cost
• Provide technical guidance on network architecture, data flows, and security controls for AI/RPA systems
• Ensure secure integration of AI/RPA tools across classified and unclassified environments

Authority to Operate (ATO) & Compliance Leadership/Management
• Lead and manage Authority to Operate (ATO) approval processes for DoD platforms, systems, and data management repositories
• Manage FISMA reporting processes and data collection for AI/RPA systems
• Develop and submit quarterly and annual CIO FISMA metrics
• Ensure compliance with FedRAMP requirements and DoD cybersecurity policies
• Conduct system security assessments and maintain comprehensive documentation
• Lead and manage Authority to Operate (ATO) approval processes for DoD platforms, systems, and data management repositories
• Develop, review, and maintain security documentation packages including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plans of Action & Milestones (POA&Ms)
• Conduct security control assessments and vulnerability analyses in accordance with NIST 800-53 and DoD 8510.01 standards
• Coordinate with Authorizing Officials (AOs) and stakeholders throughout the ATO lifecycle

ISSO/ISSM Functions & Risk Management:
• Serve in Information System Security Officer (ISSO) and Information System Security Manager (ISSM) capacities
• Monitor continuous compliance with DoD and Air Force cybersecurity policies, including DoD 8570.01-M and AFI 17-130
• Implement and maintain security controls for information systems and networks
• Conduct periodic security assessments and maintain security posture documentation
• Conduct comprehensive risk assessments and develop mitigation strategies for AI/RPA implementations

AI/RPA Security Integration:
• Provide cybersecurity expertise for the secure integration of Artificial Intelligence (AI) and Robotic Process Automation (RPA) tools
• Assess security risks and develop mitigation strategies for AI/RPA implementations across classified and unclassified environments
• Ensure AI/RPA systems comply with DoD AI ethics principles and data protection requirements
• Collaborate with development teams to implement security-by-design principles

Risk Management & Advisory:
• Conduct comprehensive risk assessments and develop risk mitigation strategies
• Advise leadership on cybersecurity posture and emerging threats related to AI/RPA technologies
• Support incident response activities and security event analysis
• Maintain situational awareness of evolving cyber threats and regulatory changes

Documentation & Reporting:
• Create and maintain executive-level documentation, metrics, and dashboards
• Generate comprehensive documentation including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plans of Action & Milestones (POA&Ms)
• Develop and review security documentation mapping technical requirements to security controls
• Interface with key stakeholders across organizational levels
• Maintain reporting accuracy and consistency across ACC reporting platforms

Working Conditions:
Location and Environment:
Primary Work Location:
• Joint Base Langley-Eustis (JBLE), Virginia
Classified Facilities:
• Regular work in Sensitive Compartmented Information Facilities (SCIFs) and secure spaces