DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com

Cybersecurity Lead – Information Assurance / cATO (Army Application Modernization)

DMI, LLC is hiring a senior Cybersecurity Lead / Information Assurance Manager to lead security engineering and authorization for modern Army applications. The applications are new cloud-native builds running in Army-owned cArmy environments on AWS: unclassified (NIPR) systems at Impact Level 5 (IL5) and Secret (SIPR) systems at Impact Level 6 (IL6). This leader owns the path from first build through ATO and continuous ATO (cATO), and keeps legacy systems compliant until they retire. It's a high-visibility role on mission-critical Army systems where you'll shape the security posture of the Army's next generation of applications.

What you'll do

• Lead Risk Management Framework (NIST SP 800-37 Rev. 2) authorizations for new systems. Build and maintain RMF-compliant packages in eMASS for Interim Authority to Test (IATT), Authority to Connect (ATC) and Authority to Operate (ATO).
• Design, put in place and show cATO pipelines, with continuous monitoring of controls, automated security validation in CI/CD pipelines, and authorization-readiness evidence.
• Make cybersecurity part of cloud-native development from day one. Make sure software and mobile applications are designed, developed, tested and fielded to DISA STIG and NSA Security Configuration Guide standards.
• Review architecture, infrastructure, application environments and web services from a security perspective. Assess how new or updated components affect the security infrastructure.
• Build security architecture inside the cArmy boundary on AWS GovCloud (IL5) and the AWS Secret Region (IL6). Use inherited cArmy common controls, the DoD Cloud Computing Security Requirements Guide, and role-based cloud access permissions.
• Run source code security review (Fortify or similar) before production releases. Run SCAP, STIG, ACAS and Security Readiness Review assessments.
• Produce Risk Management Plans and recurring risk status reports, including justification and mitigation for findings that won't be fixed, for Government cybersecurity approval.
• Run threat, vulnerability and breach management. That covers IAVA (Information Assurance Vulnerability Alert) compliance scanning, tracking patches and baseline variances, incident vulnerability reporting within 24 hours, and closing out scan findings.
• Coordinate with Army-approved Cyber Security Service Providers (CSSP, required under DoDI 8530). Give Army Cyber Command (ARCYBER) access to logging and SIEM data, and support forensic requests.
• Enforce encryption of data at rest and in transit using DoD- or NSA-approved algorithms and key management. Manage CAC and PKI-based authentication.
• Support Command Cyber Readiness Inspections (CCRI), security risk and engineering analyses, and RMF deliverables. Serve as DMI's cybersecurity counterpart to Government ISSOs and Authorizing Officials.
• Mentor and direct DMI cybersecurity and DevSecOps staff, and guide how security solutions are designed and built.

Required qualifications

• 10 or more years of progressive information systems security engineering experience, with at least 3 years supervising or managing staff.
• Hands-on experience building DoD RMF packages and managing authorizations in eMASS.
• Working knowledge of FISMA, ISO 27001, NIST SP 800-53 and FedRAMP.
• Experience with STIG and SCAP compliance, ACAS, static code analysis, and IAVA management.
• Certification: DoD 8140 cybersecurity management certification (formerly IAM), such as CISSP or CISM. It must be held on the first day of employment.
• Clearance: Active SECRET clearance at start.
• Citizenship: U.S. citizen, able to get a CAC and complete required Army cybersecurity training.

Preferred qualifications

• Direct experience achieving or operating under cATO, following the 2022 DoD CIO cATO memo and the DevSecOps Continuous Authorization Implementation Guide. That includes SBOMs, build provenance, and static, dynamic and software composition scanning gates.
• Experience authorizing new systems in a commercial cloud environment.
• Experience with Army cArmy or ECMA onboarding, AWS GovCloud or the AWS Secret Region, and AWS native security services.
• Experience with Zero Trust architecture and with IL6 or cross-domain authorizations.
• Cloud security certification (AWS Certified Security – Specialty or CCSP) and CISSP-ISSEP.
• Prior Army enterprise or personnel systems experience.

Location

The role is remote, with on-site work for classified (SIPR) access and Government meetings. The candidate can be based in either region:

• Northern Virginia: DMI headquarters (McLean, VA) and Fort Belvoir, VA
• Kentucky: Fort Knox, KY

Unclassified work is done remotely through secure, Government-approved connections. SIPR work happens at designated Government facilities using Government-issued equipment. The candidate must be able to join meetings in person or by phone within two hours' notice. Travel to supported sites as required.

Physical requirements: None.

#LI-BQ1

DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:

• Do What’s Right – We lead with honesty and integrity.
• Own the Outcome – We take responsibility and deliver.
• Deliver for Our Customers – We are relentless about delivering value.
• Think Bold, Act Smart – We innovate with purpose.
• Win Together – We collaborate and celebrate our success.

These values aren’t just ideals—they show up in how we support every part of your well-being:

• Convenience/Concierge – Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.
• Development – Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.
• Financial – Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.
• Recognition – Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.
• Wellness – Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.

DMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.

***************** No Agencies Please *****************

Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.