Cybersecurity RMF/ATO Sustainment Consultant

Silotech Group, Inc. is a Woman-Owned Small Business (WOSB) and Service-Disabled Veteran-Owned Small Business (SDVOSB) headquartered in San Antonio, Texas. We deliver full-spectrum cybersecurity, digital transformation, cloud migration, DevSecOps, and emerging technology Research and Development (R&D) solutions across the Department of War (DoW), Intelligence Community (IC), Federal civilian, State, Local and Education (SLED), commercial, and international markets.

Silotech is seeking an experienced Cybersecurity RMF / ATO Sustainment Consultant to provide independent advisory and documentation services in support of the 19AF Pilot Training Transformation (PTT) mission. This engagement is designed as an outcome-focused consulting assignment to address specific cybersecurity compliance and RMF sustainment needs. The selected contractor will operate as an independent professional, exercising discretion over work methods and execution while delivering defined cybersecurity artifacts and advisory outputs.

This engagement does not constitute staff augmentation or temporary employment.

Location

Remote (continental U.S.).

Clearance Requirement

CAC Eligibility Required (no active facility clearance required)

Scope of Consulting Services

The Independent Contractor will provide advisory, assessment, and documentation services, which may include the following deliverables:

RMF / ATO Advisory Support

• • Review existing ATO packages for:
    • Multiple cloud-based environments
    • On‑premise virtual reality or simulation systems
  • Develop and update RMF documentation artifacts aligned to RMF Steps 1–7
  • Provide sustainment recommendations for eMASS packages, SSPs, POA&Ms, and continuous monitoring strategies
  • Assess accreditation documentation for alignment with Air Force and DoD cybersecurity standards
  • Advise Government and project stakeholders on RMF compliance posture and risk mitigation strategies

• • Conduct independent assessments of cybersecurity controls and risk posture
  • Perform vulnerability assessment analysis using ACAS, Nessus, HBSS, SCAP, and STIG benchmarks
  • Provide written remediation recommendations for identified vulnerabilities and IAVAs
  • Assess incident response processes and provide improvement recommendations
  • Review firewall configurations, patch management practices, and access governance from a compliance standpoint

• • Produce consulting deliverables such as:
    • RMF sustainment assessment summaries
    • ATO readiness gap analyses
    • Risk management plans and compliance roadmaps
    • SOP and process improvement recommendations
  • Provide compliance advisory support aligned with:
    • NIST SP 800‑53
    • NIST SP 800‑171
    • DoDI 8510.01 (RMF)
    • DFARS cybersecurity requirements
    • DoD 8570 / 8140 guidance
  • Conduct third‑party software security review assessments and vendor risk analyses as requested

• Minimum 8 years of cybersecurity, RMF, ISSO, or ISSM experience OR Master’s degree with 4+ years of directly relevant experience
• Proven consulting or advisory experience supporting:
  • Multi‑cloud ATO environments
  • On‑premise ATOs for simulation or VR systems
• Extensive experience with eMASS documentation and RMF sustainment activities
• Demonstrated proficiency with ACAS, HBSS, Nessus, SCAP, and STIG Viewer
• Strong working knowledge of NIST RMF and continuous monitoring frameworks

• CompTIA Security+ required (active throughout the engagement).

• Contractor must operate as an independent business entity and is responsible for:
  • All federal, state, and local tax obligations
  • Insurance, benefits, and business expenses
• Contractor retains discretion regarding how and when work is performed to meet deliverable deadlines
• Contractor may perform services for other clients concurrently, provided no conflict of interest exists
• Compensation will be based on agreed-upon deliverables or a fixed engagement fee, documented in a consulting agreement
• Contractor may engage qualified personnel or subcontractors, subject to Government security and access requirements
• No overtime, benefits, or employee entitlements apply

• Former DoD, Air Force, or federal cybersecurity professional with RMF consulting experience
• Enterprise cybersecurity consultant specializing in ATO sustainment and compliance
• Self-directed professional with strong documentation discipline
• Comfortable operating with minimal supervision and high accountability for deliverables
• Mission-oriented consultant able to rapidly assess and stabilize compliance posture

Equal Opportunity Employer Statement

Silotech Group, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, protected veteran status, disability status, or any other characteristic protected by federal, state, or local law. 
Silotech Group participates in E-Verify. Reasonable accommodations available upon request. 
Silotech strongly encourages applications from veterans, military spouses, and members of the Reserve and National Guard.