A&A Lead (TS/SCI) — RMF & DoD Compliance

Piper Companies; Newington (VA); On-site; USD 130,000 - 150,000; Full time

Job summary

Piper Companies seeks an Accreditation & Authorization Lead to join a Federal Program in Newington, VA. The role ensures systems comply with DoD and federal cybersecurity requirements while enabling mission success through effective risk management practices.

Responsibilities include RMF lifecycle activities, creating SSPs, SARs, POA&Ms, and SCTMs; validating NIST 800-53 controls; coordinating ATO/ATC; conducting risk analyses; and using eMASS, ACAS/Nessus to monitor posture.

Qualifications

• 3+ years supporting RMF, cybersecurity compliance, or information assurance in federal/DoD environments.
• Active TS/SCI security clearance.
• Hands-on experience with NIST RMF process and ATO lifecycle.
• Knowledge of NIST 800-53, NIST 800-37, DoD RMF, STIGs, and vulnerability management.
• Experience developing RMF package documentation.
• Familiarity with eMASS and ACAS/Nessus.
• DoD 8570/8140 compliant certification (Security+, CISSP, CAP, CASP+).

Responsibilities

• Lead RMF activities across the system lifecycle from categorization to authorization and continuous monitoring.
• Develop and maintain security documentation: SSPs, SARs, POA&Ms, SCTMs, and risk reports.
• Assess compliance with NIST 800-53 and federal standards.
• Coordinate ATO and ATC activities and periodic reauthorizations.
• Conduct security reviews, vulnerability assessments, and risk analyses.
• Track remediation and ensure findings are resolved on schedule.
• Support continuous monitoring, vulnerability management, and audits.
• Collaborate with system owners, ISSOs/ISSMs, engineers, and government customers.
• Use eMASS, ACAS/Nessus, SCAP to maintain compliance and monitor posture.

Skills

RMF process

Vulnerability management

Risk assessment

Security compliance

TS/SCI Clearance

Education

Security+ / CISSP / CAP / CASP+ (DoD 8570/8140)

Tools

eMASS

ACAS/Nessus

SCAP

Job description

Piper Companies seeks an Accreditation & Authorization Lead to join a Federal Program in Newington, VA. The role ensures systems comply with DoD and federal cybersecurity requirements while enabling mission success through effective risk management practices.

Responsibilities include RMF lifecycle activities, creating SSPs, SARs, POA&Ms, and SCTMs; validating NIST 800-53 controls; coordinating ATO/ATC; conducting risk analyses; and using eMASS, ACAS/Nessus to monitor posture.