> Markdown version of [/jobs/ext/4446780-ato-administrator-senior](https://www.wearedevelopers.com/jobs/ext/4446780-ato-administrator-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ATO Administrator - Senior - **Company:** Bravura Information Technology Systems, Inc. - **Location:** Quantico, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Computer Networks, Data Systems, Intrusion Detection and Prevention, SARS Software Products, Information Technology, Cyber Warfare - **Published:** October 22, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=997aaa6c8466d7b1 ## About the Role * Education: Masters or PHD (IT, Cybersecurity, Computer Science, Info. Sys, Data Science, or SW Engineering); OR * Training: One of the following approved DoD courses - WarU DCWF 722 ISSM - Advanced Playlist; M093861 Data Systems Engineering Officer; M09CHN1 Communications Chief; M09D3H1 Cybersecurity Managers; M09DRX1 MAGTF Communications Planner; OR * Certifications: At least one of the following active certifications - CISM; CISSP; FITSP-M; GCIH; GCIA; GICSP; GSLC; ISSMP Years of Experience: 7+ years; experience may be considered as alternative to foundational qualifications. ## Description The ATO Administrator - Senior is responsible for the cybersecurity of a program, organization, system, or enclave. This includes, but is not limited to: * Core Tasks: + Support necessary compliance activities (e.g., ensure system security configuration guidelines are followed, compliance monitoring occurs). + Continuously validate organization against policies/guidelines/procedures/regulations/laws to ensure compliance. + Acquire & manage necessary resources, including leadership support, financial resources, & key security personnel, to support IT security goals & objectives & reduce overall organizational risk. + Advise senior management (e.g., CIO) on risk levels & security posture. + Advise appropriate senior leadership or Authorizing Official of changes affecting organization's cybersecurity posture. + Collect & maintain data needed to meet system cybersecurity reporting. + Communicate value of IT security throughout all levels of organization stakeholders. + Ensure security improvement actions are evaluated, validated, & implemented as required. + Ensure that cybersecurity inspections, tests, & reviews are coordinated for network environment. + Ensure that cybersecurity requirements are integrated into continuity planning for that system &/or organization(s). + Identify alternative information security strategies to address organizational security objective. + Identify IT security program implications of new technologies or technology upgrades. + Interpret patterns of noncompliance to determine their impact on levels of risk &/or overall effectiveness of enterprise's cybersecurity program. + Manage monitoring of information security data sources to maintain organizational situational awareness. + Oversee information security training & awareness program. + Participate in development or modification of computer environment cybersecurity program plans & requirements. + Prepare, distribute, & maintain plans, instructions, guidance, & SOPs concerning security of network system(s) operations. + Provide system related input on cybersecurity requirements to be included in statements of work & other appropriate procurement documents. + Recognize a possible security violation & take appropriate action to report incident, as required. + Recommend resource allocations required to securely operate & maintain an organization's cybersecurity requirements. + Supervise or manage protective or corrective measures when cybersecurity incident or vulnerability is discovered. + Track audit findings & recommendations to ensure appropriate mitigation actions are taken. + Promote awareness of security issues among management & ensure sound security principles are reflected in organization's vision & goals. + Oversee policy standards & implementation strategies to ensure procedures & guidelines comply with cybersecurity policies. + Identify security requirements specific to an IT system in all phases of System Life Cycle. + Ensure plans of actions & milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc. + Assure successful implementation & functionality of security requirements & appropriate IT policies & procedures that are consistent with organization's mission & goals. * Additional Tasks: + Participate in acquisition process as necessary, following appropriate supply chain risk management practices. + Ensure all acquisitions, procurements, & outsourcing efforts address information security requirements consistent with organization goals. + Forecast ongoing service demands & ensure security assumptions are reviewed, as necessary. + Define &/or implement policies & procedures to ensure protection of critical infrastructure as appropriate. + Acquire necessary resources, including financial resources, to conduct an effective enterprise continuity of operations program. + Advise senior management (e.g., CIO) on cost/benefit analysis of information security programs, policies, processes, & systems, & elements. + Collaborate with stakeholders to establish enterprise continuity of operations program, strategy, & mission assurance. + Ensure application of security patches for commercial products integrated into system design meet timelines dictated by management authority for intended operational environment. + Ensure that protection & detection capabilities are acquired or developed using IS security engineering approach & are consistent with organization-level cybersecurity architecture. + Establish overall enterprise information security architecture with organization's overall security strategy. + Evaluate & approve development efforts to ensure that baseline security safeguards controls/measures are appropriately installed. + Evaluate cost benefit, economic, & risk analysis in decision making process. + Interface with external organizations (e.g., public affairs, law enforcement, Command or Component Inspector General) to ensure appropriate & accurate dissemination of incident & other Computer Network Defense information. + Interpret &/or approve security requirements relative to capabilities of new information technologies. + Lead & align IT security priorities with security strategy. + Lead & oversee information security budget, staffing, & contracting. + Manage publishing of Computer Network Defense guidance (e.g., TCNOs, Concept of Operations, Net Analyst Reports, NTSM, MTOs) for enterprise constituency. + Manage threat or target analysis of cyber defense information & production of threat information within enterprise. + Monitor & evaluate effectiveness of enterprise's cybersecurity safeguards to ensure they provide intended level of protection. + Participate in risk assessment & authorization per Risk Management Framework processes. + Provide enterprise cybersecurity & supply chain risk management guidance for development of Continuity of Operations Plans. + Provide leadership & direction to IT personnel by ensuring that cybersecurity awareness, basics, literacy, & training are provided to operations personnel commensurate with their responsibilities. + Provide technical documents, incident reports, findings from computer examinations, summaries, & other situational awareness information to higher headquarters. + Recommend policy & coordinate review & approval. + Use federal & organization-specific published documents to manage operations of their computing environment system(s). + Participate in Risk Governance process to provide security risks, mitigations, & input on other technical risk. + Evaluate effectiveness of procurement function in addressing information security requirements & supply chain risks through procurement activities & recommend improvements. Specific to this effort, this role will provide MCU ATO Management Support to the Cybersecurity & Information Security Support team, including, but not limited to: * Support Defense IA RMF process governed by DoDI 8510.01. * Support creation, management, & update of all eMASS packages including ATO, ATO with Conditions, IATT, IATB, & ATC. * Support creation, update, review, & submission of required RMF documents to include but not limited to SSPs, SARs, POA&Ms, RARs, STIG Checklists, ACAS Scans, HW & SW baselines, network & system diagrams. * Support review, revision, & update of ATO packages & documents. * Support identification, documentation, implementation, auditing, & reporting of required security controls IAW NIST 800-53 & tailor to specific mission environment. * Complete Government-provided required DISA eMASS training & DoW RMF training courses within 30 days of contract award or hire date.