RMF, Cybersecurity, and ATO Policy Consultant

What you will be doing:

• Perform analyses and development of national and military cyber strategy, doctrine, and policy to support the development of a new Risk Management framework.
• Coordinate, develop, and integrate strategic guidance and policy documents.
  Identify and review national cyber policy goals, objectives, and senior-level direction impacting USSF missions
  Provide research, analyze, and make recommendations to develop and evolve strategy, doctrine, and policy.
• Provide expertise to evaluate, assess and make recommendations to address DoD and Intelligence Community (IC) Risk Management Framework and Authority to Operate (AO) policies and requirements at multiple classification levels (up to TS/SCI) to gain approval/recertification for pilot efforts related to digital capabilities, digital infrastructure, software applications.
• Support Security and Operations (DevSecOps), AI/ML algorithms and other digital services which includes identifying alternate strategies to manage risk to enterprise responsibilities while pursuing state of the art capabilities.
• Interfacing both remotely and in-person with various Department of the Air Force organizations in diverse geographic locales, as needed, to advise and assist on the advancement of cyber and infrastructure needs.
  

What you will need:

• Bachelor’s Degree (Masters preferred) plus a minimum of 5 years of experience in analysis of
  program information system schemes or equivalent
• Strategic knowledge of the processes within DAF to formulate and execute technology-related
  projects
• Able to travel frequently or work remotely, when necessary, to assist and advise.
• Active TS/SCI Security Clearance

Desired Experience/qualifications:

• Ability to identify and resolve challenges at a strategic level
• Ability to brief/interactive with senior (GO/FLAG) level officer and senior civilians
  Developing and writing doctrine and policy.
• Coordinating doctrine and policy between staff agencies to ensure a coherent planning effort.
• Previous cyber planning or doctrine experience at operational/theater level (e.g. combatant
  command, joint/combined task force) highly desired
• Previous experience on a CCMD, MAJCOM, HHQ, Joint Staff, OSD etc. staff highly desired
Zero Trust:

Security Architecture & Engineering: 

• Deep understanding of Zero Trust principles and architectures. 

• Experience designing and implementing micro-segmentation, identity and access management (IAM), least privilege, and continuous monitoring solutions. 

• Familiarity with relevant security frameworks (NIST 800-207, DoD Zero Trust Reference Architecture). 

Network Security:
• Expertise in network segmentation, firewalls, intrusion detection/prevention systems (IDS/IPS), and network behavior analysis. 

• Knowledge of software-defined networking (SDN) and network function virtualization (NFV) for dynamic policy enforcement. 

Identity & Access Management: 

• Strong understanding of multi-factor authentication (MFA), single sign-on (SSO), role-based access control (RBAC), and privileged access management (PAM). 

• Experience with identity federation and directory services. 

Data Security: 

• Experience with data encryption, data loss prevention (DLP), and data classification. 

• Knowledge of data governance and compliance requirements relevant to space systems and operations. 

Base Infrastructure Modernization: 

Project Management: 

• Strong planning, organization, and communication skills to manage complex infrastructure modernization projects. 

Cross-Domain Solutions: 

• Systems Integration: 

• Expertise in integrating systems and data across different security domains and classification levels. 

• Understanding of cross-domain solutions (CDS) and guard technologies. 

• Network Security:

  • Knowledge of multi-level security (MLS) networks, boundary protection mechanisms, and data diodes. 

• Experience with secure data transfer protocols and encryption technologies. 

USSF Cyber Resiliency: 

• Threat Intelligence: 

  • Understanding of current cyber threats targeting space systems and infrastructure. 

• Ability to analyze threat intelligence and translate it into actionable security measures. 

• Vulnerability Management: 

• Expertise in vulnerability scanning, penetration testing, and red teaming. 

• Ability to identify, prioritize, and remediate security vulnerabilities in space systems and ground segments. 

• Collaboration: 

• Ability to work with multidisciplinary teams, including space and cyber experts. 

General Skills: 

• Strong understanding of space systems, operations, and architectures. 

• Excellent communication, collaboration, and problem-solving skills. 

• Ability to adapt to rapidly evolving technologies and threats. 

• Strong work ethic and commitment to national security.