RMF, Cybersecurity, and ATO Policy Consultant

Delta Solutions & Strategies is seeking a full-time RMF, Cybersecurity, and ATO Consultant with a strong background in policy at the Headquarters level. This position is at the Pentagon, Washington, DC. It provides Advisory and Assistance Services (A&AS) to support the organizations within the Headquarters United States Space Force (HQ USSF), which includes but are not limited to, Chief of Space Operations (CSO), Chief Operations Office (COO), Chief Human Capital Office (CHCO), Deputy Chief of Space Operations for Cyber and Data (S6), Chief Strategy and Resourcing Office (CSRO), and Director of Staff (DS). What you will be doing:

Perform analyses and development of national and military cyber strategy, doctrine, and policy to support the development of a new Risk Management framework.

Coordinate, develop, and integrate strategic guidance and policy documents.
Identify and review national cyber policy goals, objectives, and senior-level direction impacting USSF missions
Provide research, analyze, and make recommendations to develop and evolve strategy, doctrine, and policy.

Provide expertise to evaluate, assess and make recommendations to address DoD and Intelligence Community (IC) Risk Management Framework and Authority to Operate (AO) policies and requirements at multiple classification levels (up to TS/SCI) to gain approval/recertification for pilot efforts related to digital capabilities, digital infrastructure, software applications.

Support Security and Operations (DevSecOps), AI/ML algorithms and other digital services which includes identifying alternate strategies to manage risk to enterprise responsibilities while pursuing state of the art capabilities.

Interfacing both remotely and in-person with various Department of the Air Force organizations in diverse geographic locales, as needed, to advise and assist on the advancement of cyber and infrastructure needs.

What you will need:

Bachelor’s Degree (Masters preferred) plus a minimum of 5 years of experience in analysis of
program information system schemes or equivalent

Strategic knowledge of the processes within DAF to formulate and execute technology-related
projects

Able to travel frequently or work remotely, when necessary, to assist and advise.

Active TS/SCI Security Clearance

Desired Experience/qualifications:

Ability to identify and resolve challenges at a strategic level

Ability to brief/interactive with senior (GO/FLAG) level officer and senior civilians
Developing and writing doctrine and policy.

Coordinating doctrine and policy between staff agencies to ensure a coherent planning effort.

Previous cyber planning or doctrine experience at operational/theater level (e.g. combatant
command, joint/combined task force) highly desired

Previous experience on a CCMD, MAJCOM, HHQ, Joint Staff, OSD etc. staff highly desired

Zero Trust: Security Architecture & Engineering: 

• Deep understanding of Zero Trust principles and architectures. 

• Experience designing and implementing micro-segmentation, identity and access management (IAM), least privilege, and continuous monitoring solutions. 

• Familiarity with relevant security frameworks (NIST 800-207, DoD Zero Trust Reference Architecture). 

Network Security:
• Expertise in network segmentation, firewalls, intrusion detection/prevention systems (IDS/IPS), and network behavior analysis. 

• Knowledge of software-defined networking (SDN) and network function virtualization (NFV) for dynamic policy enforcement. 

Identity & Access Management: 

• Strong understanding of multi-factor authentication (MFA), single sign-on (SSO), role-based access control (RBAC), and privileged access management (PAM). 

• Experience with identity federation and directory services. 

Data Security: 

• Experience with data encryption, data loss prevention (DLP), and data classification. 

• Knowledge of data governance and compliance requirements relevant to space systems and operations. 

Base Infrastructure Modernization: 

Project Management: 

• Strong planning, organization, and communication skills to manage complex infrastructure modernization projects. 

Cross-Domain Solutions: 

• Systems Integration: 

• Expertise in integrating systems and data across different security domains and classification levels. 

• Understanding of cross-domain solutions (CDS) and guard technologies. 

• Network Security:

  • Knowledge of multi-level security (MLS) networks, boundary protection mechanisms, and data diodes. 

• Experience with secure data transfer protocols and encryption technologies. 

USSF Cyber Resiliency: 

• Threat Intelligence: