ATO Security Analyst
Who We Are
Known for being a Best Place to Work and a People First company, IronArch Technology is an award-winning Service-Disabled Veteran-Owned Small Business (SDVOSB) specializing in providing innovative solutions and world class services to Federal Government clients.
Our employees have voted us as a 'Best Place to Work' 9 times and we are an INC 5000 recipient for being one of the fastest growing businesses in the United States.
Our Values: Deliver Outcomes with Speed | Own the Work and the Results | Respect People. Speak Directly. | Stay Curious. Enjoy the Journey.
About the Role
IronArch Technology is looking for an ATO Security Analyst to support the Department of Veterans Affairs in maintaining cybersecurity compliance across VA research environments. This is a documentation-first role. You will own the paperwork that keeps VA systems authorized and running: ATO and ATC packages, security artifacts, POA&Ms, gap analyses, and FISMA documentation.
If you find satisfaction in precision, in keeping complex authorization packages current and accurate, and in being the person who knows the RMF process cold then this role was built for you. You'll work directly with VA Information System Owners (ISOs), Information System Security Officers (ISSOs), site managers, and research stakeholders to drive ATO activities from start to finish.
What You’ll Do
Most of your time will be spent developing, reviewing, and maintaining ATO and ATC packages including system security plans (SSPs), control implementation statements, FISMA documents, and POA&Ms across a portfolio of VA research systems. You'll own the tracking and resolution of open POA&M items, keep authorization schedules current, and make sure nothing falls through the cracks.
You'll support all RMF steps from security categorization through authorization, coordinating directly with VA ISOs, ISSOs, site managers, and system owners to close gaps and hit deadlines. When research teams have cybersecurity compliance questions, you're the person who answers them using current VA Handbooks, Directives, and NIST guidance.
You'll also conduct security assessment reviews for VA research submissions, work within the VA's Continuous Authorization and Monitoring (CAM) framework, and support product installation planning for major system changes. You'll lead client-facing meetings on ATO topics regularly. The expectation is that you can walk both technical and non-technical audiences through complex authorization status clearly and confidently.