Source Job

• Manages the 2ROPS accreditation process for small classified mobile systems.
• Renews the current Authority to Operate (ATO).
• Provides ongoing cybersecurity sustainment support.

GovCIO transforms government IT with innovative services and solutions. We are a team of passionate people making a positive impact. We are changing the face of government IT and building a workforce that fuels this mission.

• Perform all 7 steps of the Risk Management Framework (RMF) per DoDI 8510.01, producing required deliverables at each step
• Develop, maintain, and update RMF packages including System Security Plans (SSP), Security Assessment Reports (SAR), Risk Assessment Reports (RAR), and Plans of Action & Milestones (POA&M)
• Ensure compliance with federal, DoD, and DLA cybersecurity requirements, policies, and standards

FWI is building a team to provide Program Management Office (PMO) Support Services for the Defense Agencies Initiative (DAI). It has been recognized as a Top Workplace by the Washington Post in 2024 and 2025, offering excellent growth opportunities in a collaborative environment.

• Support ongoing FedRAMP authorization including SSP, POA&M, evidence, and 3PAO coordination.
• Manage and oversee NIST SP 800-53 compliance.
• Oversee continuous monitoring, vulnerabilities, incidents.

IFS is a billion-dollar revenue company with 7000+ employees on all continents. Their leading AI technology is the backbone of their award-winning enterprise software solutions, enabling customers to be their best when it really matters–at the Moment of Service™.

• Support CMMC implementation efforts
• Conduct gap assessments against CMMC/NIST SP 800-171 requirements
• Assist with the development and updates to the System Security Plan (SSP) and POA&M

Broadway Ventures transforms challenges into opportunities with expert program management, cutting-edge technology, and innovative consulting solutions. As an 8(a), HUBZone, and Service-Disabled Veteran-Owned Small Business (SDVOSB), they empower government and private sector clients by delivering tailored solutions that drive operational success, sustainability, and growth.

• Lead the technical design, implementation, and ongoing security operations of a Microsoft 365 GCC High environment supporting Controlled Unclassified Information (CUI).
• Implement and evidence compliance with CMMC Level 2, DFARS 7012, and NIST 800-171 controls.
• Act as the technical owner of the GCC High enclave, partnering with Security, Legal, and IT to ensure audit readiness and successful certification by May 2026.

ServiceNow, founded in 2004, is a global market leader providing AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500. They offer an intelligent cloud-based platform that connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work.

• Apply the Risk Management Framework (RMF) to support system authorization activities.
• Develop and maintain RMF artifacts and coordinate with stakeholders to ensure systems meet security compliance requirements.
• Support the design, implementation, and maintenance of secure cloud architectures.

EXPANSIA delivers high-impact technologies, technology-enabled services and advanced manufacturing solutions to the U.S. Department of Defense and related national security customers. They operate as a multi-entity aerospace and defense technology and tech-enabled services and manufacturing enterprise positioned for scalable growth, operational excellence, and long-term value creation.

• Monitor and validate Kubernetes and data lake deployments for compliance.
• Maintain continuous monitoring dashboards and conduct vulnerability scans.
• Prepare and update system security documentation.

Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. They deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.

• Performs detailed architecture and technical design reviews on the full stack for vendor solutions.
• Conducts architecture reviews of Cloud Service Providers (CSPs) authorization packages to validate the secure design, alignment to FedRAMP and agency requirements.
• Completes comprehensive review and comments on documents of CSPs FedRAMP documentation, including but not limited to system security plans, policies and procedures.

Abile Group partners with the Intelligence Community and their Contractors in Enterprise Analytics & Performance Management, IT & Systems Engineering and Program & Project Management. They are an EDWOSB dedicated to their employees and clients, looking for high performing employees who enjoy providing advice and guidance.

• Manage and develop staff members under Product Compliance.
• Oversee and contribute to the vulnerability management lifecycle.
• Assess and serve as a subject matter expert for regulatory and compliance requirements.

ExtraHop is a company that focuses on network detection and response (NDR) to help organizations stay ahead of emerging threats. They integrate network threat detection, network performance management, intrusion detection, and packet forensics into a single console.

• Support client engagements related to CMMC readiness, implementation, and documentation
• Develop, update, and maintain System Security Plans (SSPs)
• Assist with NIST SP 800-171, NIST SP 800-53, and FedRAMP documentation, control mapping, and related deliverables

Hotman Group is a remote boutique cybersecurity and GRC firm supporting clients across a range of industries and compliance needs. They value strong writing, quality work, collaboration, sound judgment, and practical execution.

• Design and implement InfoSec engineering for cloud implementations.
• Oversee system security risks and compliance with cybersecurity standards.
• Support authorizations and develop artifacts for security milestones.

EXPANSIA, along with JHNA and CTSi, forms a Defense Technology platform delivering high-impact technologies and services to the U.S. Department of Defense. Backed by Falfurrias Management Partners, they offer expertise across various military programs, digital engineering, and specialized manufacturing.

• Lead architecture interviews with stakeholders.
• Develop architecture briefing documents.
• Support Continuous Monitoring activities.

Smartsheet helps people and teams achieve their goals with work management and scalable solutions. They empower teams to automate tasks, uncover insights, and scale smarter, with a focus on creating space for innovation and meaningful work.

• Serve as the project manager for overall execution and delivery of cybersecurity requirements.
• Coordinate with government leadership and stakeholders to facilitate effective communication.
• Develop and maintain project management plans for the contract lifecycle.

Jobgether is a platform that uses AI-powered matching process to ensure candidate applications are reviewed quickly and fairly. They identify the top-fitting candidates for companies.