Senior ATO Subject Matter Expert

Washington, United States | Posted on 05/14/2026Contract Type: Federal Government Contract (C2C/W2/1099)Agency: U.S. Department of Justice — Federal Bureau of Prisons (BOP)Contract: IT Cyber Security Support Services (IT CSSS)Location: BOP Central Office, 320 First Street NW, Washington, DC 20534 (100% ON-SITE — No Remote Work)Schedule: Monday–Friday, 0730–1600 ESTDuration: Base Year + Four Option YearsMANDATORY REQUIREMENTS (Non-Negotiable)U.S. CITIZENSHIP REQUIRED — No Exceptions (No Dual Citizens, No Green Cards, No Visa Holders)PUBLIC TRUST + SUITABILITY CLEARANCE REQUIRED (active or ability to obtain)DRUG TESTING MANDATORY — Urinalysis required at BOP facilityBACKGROUND INVESTIGATION — Full federal background check including fingerprinting, credit check, criminal historyBachelor's degree in Cybersecurity, IT, Computer Science, or related field (Master's preferred)Minimum 10 years hands‑on ATO/RMF experience in federal environmentsMinimum 5 years specifically supporting DOJ or federal law enforcement ATO processesPosition OverviewWe are seeking a Senior Authorization to Operate (ATO) Subject Matter Expert to serve as Key Personnel on a critical DOJ Federal Bureau of Prisons IT Cyber Security Support Services contract. This role leads all ATO lifecycle activities across BOP's enterprise IT environment, ensuring full compliance with FISMA, NIST Risk Management Framework (RMF), and DOJ‑specific security requirements including JCAM.Key ResponsibilitiesLead end‑to‑end ATO lifecycle management for all BOP information systems — from categorization through continuous monitoringDevelop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms)Conduct security control assessments aligned with NIST SP 800-53 Rev 5Manage continuous monitoring programs including vulnerability scanning, configuration audits, and automated compliance checksServe as primary liaison between BOP CISO office, system owners, ISSOs, and DOJ authorization officialsPrepare and present ATO packages to Authorizing Officials (AOs)Implement and manage RMF processes per NIST SP 800-37 Rev 2Support POA&M remediation tracking and coordinate closure of audit findings within SLALead compliance for FISMA reporting, FedRAMP cloud authorizations, and DOJ JCAM requirementsMentor junior security analysts and ISSOs on ATO processesRequired Technical Skills & FrameworksNIST SP 800-53 Rev 5 — Security and Privacy ControlsFISMA Compliance and ReportingJCAM (Justice Cybersecurity Architecture and Management)FedRAMP — Cloud Security AuthorizationSSP, SAR, POA&M development and managementVulnerability scanning tools (Tenable Nessus, Qualys, or equivalent)GRC platforms (CSAM, Xacta, eMASS, or equivalent)SCAP/STIG compliance and hardening standardsPreferred CertificationsCISSP (Certified Information Systems Security Professional)CAP (Certified Authorization Professional) — Highly PreferredCISM, CRISC, Security+ CE100% On-Site at BOP Central Office, Washington, DC 20534Monday–Friday, 0730–1600 ESTFederal law enforcement environment — strict security protocolsCompensationSalary Range: $140,000 – $165,000 (W2)C2C Rate: $90/hrIMPORTANT: This is a Key Personnel position on a federal contract. Candidates must meet ALL mandatory requirements.Innosoft Corporation is an Equal Opportunity Employer.#J-18808-Ljbffr

Washington, United States | Posted on 05/14/2026Contract Type: Federal Government Contract (C2C/W2/1099)Agency: U.S. Department of Justice — Federal Bureau of Prisons (BOP)Contract: IT Cyber Security Support Services (IT CSSS)Location: BOP Central Office, 320 First Street NW, Washington, DC 20534 (100% ON-SITE — No Remote Work)Schedule: Monday–Friday, 0730–1600 ESTDuration: Base Year + Four Option YearsMANDATORY REQUIREMENTS (Non-Negotiable)U.S. CITIZENSHIP REQUIRED — No Exceptions (No Dual Citizens, No Green Cards, No Visa Holders)PUBLIC TRUST + SUITABILITY CLEARANCE REQUIRED (active or ability to obtain)DRUG TESTING MANDATORY — Urinalysis required at BOP facilityBACKGROUND INVESTIGATION — Full federal background check including fingerprinting, credit check, criminal historyBachelor's degree in Cybersecurity, IT, Computer Science, or related field (Master's preferred)Minimum 10 years hands‑on ATO/RMF experience in federal environmentsMinimum 5 years specifically supporting DOJ or federal law enforcement ATO processesPosition OverviewWe are seeking a Senior Authorization to Operate (ATO) Subject Matter Expert to serve as Key Personnel on a critical DOJ Federal Bureau of Prisons IT Cyber Security Support Services contract. This role leads all ATO lifecycle activities across BOP's enterprise IT environment, ensuring full compliance with FISMA, NIST Risk Management Framework (RMF), and DOJ‑specific security requirements including JCAM.Key ResponsibilitiesLead end‑to‑end ATO lifecycle management for all BOP information systems — from categorization through continuous monitoringDevelop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms)Conduct security control assessments aligned with NIST SP 800-53 Rev 5Manage continuous monitoring programs including vulnerability scanning, configuration audits, and automated compliance checksServe as primary liaison between BOP CISO office, system owners, ISSOs, and DOJ authorization officialsPrepare and present ATO packages to Authorizing Officials (AOs)Implement and manage RMF processes per NIST SP 800-37 Rev 2Support POA&M remediation tracking and coordinate closure of audit findings within SLALead compliance for FISMA reporting, FedRAMP cloud authorizations, and DOJ JCAM requirementsMentor junior security analysts and ISSOs on ATO processesRequired Technical Skills & FrameworksNIST SP 800-53 Rev 5 — Security and Privacy ControlsFISMA Compliance and ReportingJCAM (Justice Cybersecurity Architecture and Management)FedRAMP — Cloud Security AuthorizationSSP, SAR, POA&M development and managementVulnerability scanning tools (Tenable Nessus, Qualys, or equivalent)GRC platforms (CSAM, Xacta, eMASS, or equivalent)SCAP/STIG compliance and hardening standardsPreferred CertificationsCISSP (Certified Information Systems Security Professional)CAP (Certified Authorization Professional) — Highly PreferredCISM, CRISC, Security+ CE100% On-Site at BOP Central Office, Washington, DC 20534Monday–Friday, 0730–1600 ESTFederal law enforcement environment — strict security protocolsCompensationSalary Range: $140,000 – $165,000 (W2)C2C Rate: $90/hrIMPORTANT: This is a Key Personnel position on a federal contract. Candidates must meet ALL mandatory requirements.Innosoft Corporation is an Equal Opportunity Employer.#J-18808-Ljbffr

• 

• Government Careers