ATO Specialist - VA Chatbot Program

Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.

We are seeking an experienced ATO Specialist to lead security authorization and compliance efforts for the VA Chatbot program. In this role, you’ll own and drive the Authority to Operate (ATO) lifecycle for a veteran-facing system, partnering closely with engineering, program leadership, and government stakeholders to maintain a strong, audit-ready security posture while supporting ongoing delivery.

What you’ll be doing:

• Lead and manage the ATO, reauthorization, and Continuous Monitoring lifecycle for the VA Voicebot system
• Serve as the primary security point of contact for the program, coordinating with VA stakeholders and internal leadership
• Prepare, maintain, and update required security and privacy artifacts, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), Privacy Impact Assessments (PIAs), and supporting evidence
• Partner with engineering and program management teams to ensure security controls are properly implemented, documented, and maintained in alignment with RMF and VA security policy
• Coordinate control assessments, evidence collection, and responses to audit or assessment findings
• Advocate for and support adoption of security best practices, including Zero Trust Architecture (ZTA) concepts, to strengthen the platform’s overall security posture

What you’ll bring:

• Proven experience leading ATO processes for federal information systems
• Strong working knowledge of the Risk Management Framework (RMF) and federal security requirements
• Demonstrated experience producing and maintaining federal security documentation, including SSPs, POA&Ms, PIAs, and SARs
• Familiarity with Zero Trust Architecture principles and how they apply within federal systems

• Performs other related duties as assigned.

Requirements:

• Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.

Education:

• Bachelor’s degree