Cybersecurity/RMF Lead

• Prepare and manage the security authorization package (SSP, POA&M and control evidence) in coordination with the Mission Owner and Authorizing Official.
• Implement identity, access and data controls (CAC/PIV federation, role separation, audit records and secrets management).
• Define operational technology (OT) segmentation for sensors, gateways and building controllers.
• Run vulnerability management, continuous monitoring and required incident reporting.
• Maintain NIST SP 800-171 evidence and support CMMC assessments.
• Deliver security awareness content for technicians and administrators.
• Run vulnerability scans on a regular, defined schedule and track remediation to closure.
• Review audit logs and security alerts and investigate suspicious activity.
• Perform security impact analysis on proposed system changes.

Competencies

• RMF/ATO package development
• DoD cybersecurity controls
• Risk assessment and continuous monitoring
• Clear security communication and training
• Audit log review and threat analysis

Supervisory Responsibility

None required for this position

Work Environment

Remote or office-based, computer-focused work, with periodic on-site travel to Fort Campbell, Kentucky.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Prolonged periods sitting at a desk and working on a computer.
• Must be able to lift up to 25 lb.
• Occasional walking of buildings and mechanical spaces during on-site security walkdowns.

Experience

• 7+ years of DoD cybersecurity experience.
• 3+ years leading RMF/ATO packages (eMASS) through authorization.
• Authored ATO packages that were granted.
• Working knowledge of Azure Government or equivalent cloud security tooling.

Education

Bachelor's degree in Cybersecurity, Information Systems or a related field.

Additional Eligibility Qualifications

• CISSP or CISM (DoD 8140 IAM Level II/III) required.
• CompTIA Security+ required at minimum.
• Must be able to pass a background check and obtain installation access.

• NIST SP 800-171 and CMMC assessments.
• Army authorization processes.
• OT/IoT security (NIST SP 800-82).
• Experience with ACAS/Nessus vulnerability scanning and DISA STIGs.
• Experience with SIEM tools (e.g., Microsoft Sentinel or Splunk).
• Experience working on Department of Defense (DoD) installations, contracts or programs is a plus.

Full-time and part-time positions available. Typical hours are Monday through Friday, daytime.

Travel

Periodic travel to Fort Campbell, Kentucky, for authorization meetings and operational technology walkdowns.

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre-employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

None

AAP/EEO Statement

Ho-Chunk, Inc. is an award-winning economic development corporation of the Winnebago Tribe of Nebraska. Our mission is to provide long-term economic development for the Winnebago Tribe and job opportunities for Tribal members.

All Native Group is a network of small businesses that support the critical missions of various U.S. Government customers. Our capabilities include telecommunications, health, logistics, specialized training, professional services, and IT solutions. Since earning our first federal contract in 2004, we have continued to grow and diversify our services while maintaining a strong commitment to excellence. As a tribally owned organization, All Native Group operates multiple subsidiary businesses, providing clients with the advantages of working with a small business while leveraging the resources and expertise of a larger, established company.

Our work is guided by our core NATIVE values:

• Native American Owned & Proud – Serving the Winnebago Tribe of Nebraska.
• Accountable – To always do what’s right.
• Team-Focused – For inclusive progress.
• Innovative – In creating solutions.
• Visionary – In our purpose and direction.
• Excellence – Through learning and performance.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.