Accreditation & Authorization Lead to join a Federal Program located in
Newington, VA. The Accreditation & Authorization Lead will play a critical role in ensuring systems maintain compliance with Department of Defense (DoD) and federal cybersecurity requirements while enabling mission success through effective risk management practices.
Responsibilities of the A&A Lead:- Lead and support RMF activities throughout the system lifecycle, from system categorization through authorization and continuous monitoring.
- Develop, maintain, and update cybersecurity documentation including:
- System Security Plans (SSPs)
- Security Assessment Reports (SARs)
- Plans of Action and Milestones (POA&Ms)
- Security Control Traceability Matrices (SCTMs)
- Risk Assessment Reports
- Assess and validate compliance with NIST 800-53 security controls and applicable federal cybersecurity standards.
- Coordinate and support Authorization to Operate (ATO), Authority to Connect (ATC), and periodic reauthorization activities.
- Conduct security reviews, vulnerability assessments, and risk analyses to identify threats and mitigation strategies.
- Track remediation efforts and ensure cybersecurity findings are resolved in accordance with organizational timelines.
- Support continuous monitoring initiatives, vulnerability management, and cybersecurity audits.
- Collaborate with system owners, ISSOs, ISSMs, engineers, and government customers to ensure cybersecurity requirements are incorporated into system design and operations.
- Utilize tools such as eMASS, ACAS/Nessus, SCAP, and other cybersecurity platforms to maintain compliance and monitor security posture.
Qualifications of the A&A Lead:- 3+ years of experience supporting RMF, cybersecurity compliance, or information assurance programs within a federal or DoD environment.
- Active TS/SCI Security Clearance
- Hands-on experience with the NIST RMF process and ATO lifecycle.
- Knowledge of:
- NIST 800-53
- NIST 800-37
- DoD RMF
- STIG implementation and compliance
- Vulnerability management processes
- Experience developing and maintaining RMF package documentation.
- Familiarity with eMASS and vulnerability scanning tools such as ACAS/Nessus.
- Strong understanding of cybersecurity principles, risk management, and security control implementation.
- Active DoD 8570/8140 compliant certification such as Security+, CISSP, CAP, CASP+, or equivalent.
Compensation for the A&A Lead:- Salary Range: $140,000+ *flexible based on experience*
- Comprehensive Benefits: Medical, Dental, Vision, PTO, and Sick Leave as required by law
- Flexible working schedule
- Unlimited opportunities for growth
#LI-CJ2
#LI-ONSITE
Key Words: rmf, security, cybersecurity, dod, cleared, federal, clearance, army, vulnverability, emass, risk management, nist, framework, stig, compliance, security plus, implementation, nessus, scap, nessus, issos, issms, sctms, poa, sar, ssp
