Accreditation & Authorization Lead

Zachary Piper Solutions; Fort Belvoir, Northern (VA, KY); Hybrid; USD 101,000 - 168,000; Full time

Benefits offered by this job

PTO

Medical Insurance

Dental

Vision

401K

Sick Leave

Job summary

Zachary Piper Solutions is seeking an RMF Cybersecurity Specialist to support government systems in federal and DoD environments. This on-site role at Fort Belvoir, VA leads RMF activities to ensure authorization and secure operation throughout the lifecycle.

Requirements include 3+ years of RMF/federal experience, hands-on with NIST RMF, NIST 800-53/800-37, eMASS, ACAS/Nessus, and STIGs, plus a DoD 8570/8140–compliant certification. Active TS/SCI clearance is required.

Qualifications

• 3+ years supporting RMF, cybersecurity compliance or security authorization in DoD or federal environments.
• Hands-on with NIST RMF, NIST 800-53/800-37, DoD RMF, eMASS, ACAS/Nessus, and STIGs.
• Active DoD 8570/8140 compliant certification (Security+, CAP, CASP+, CISSP, CISM) preferred.

Responsibilities

• Lead RMF activities through system lifecycle including categorization, control implementation, authorization and continuous monitoring.
• Develop and maintain cybersecurity documentation such as SSPs, SARs, POA&Ms, SCTMs, and risk assessment reports.
• Assess compliance with NIST RMF standards and STIGs; support ATO, ATC, reauthorization, and audits.
• Utilize eMASS, ACAS/Nessus to monitor posture and track remediation efforts.

Skills

RMF

NIST RMF

NIST 800-53

ACAS/Nessus

eMASS

Vulnerability management

Security+ / CISSP / CAP (8570/8140)

Education

Bachelor's degree in Cybersecurity / IS / CS

Tools

eMASS

ACAS/Nessus

STIG tooling

Job description

Zachary Piper Solutions is seeking an RMF Cybersecurity Specialist to support a company focused on protecting critical government systems through cybersecurity compliance, risk management, and accreditation efforts within federal and DoD environments. This position is on-site at Fort Belvoir, VA. The RMF Cybersecurity Specialist will lead and support Risk Management Framework (RMF) activities to ensure systems maintain compliance, achieve authorization, and remain secure throughout their lifecycle. Join a mission-driven team responsible for safeguarding national security systems and enabling secure operations across complex federal environments.

Responsibilities for the RMF Cybersecurity Specialist include:

• Lead RMF activities throughout the system lifecycle, including system categorization, security control implementation, authorization, and continuous monitoring.
• Develop and maintain cybersecurity documentation, including SSPs, SARs, POA&Ms, SCTMs, and Risk Assessment Reports.
• Assess compliance with NIST 800-53, NIST 800-37, DoD RMF requirements, and STIG implementation standards.
• Support ATO, ATC, reauthorization efforts, vulnerability assessments, risk analyses, and cybersecurity audits.
• Utilize eMASS, ACAS/Nessus, and related cybersecurity tools to monitor security posture, track remediation efforts, and support compliance initiatives.

Required Qualifications for the RMF Cybersecurity Specialist include:

• 3+ years of experience supporting RMF, cybersecurity compliance, information assurance, or security authorization efforts within DoD or federal environments.
• Hands-on experience with NIST RMF, NIST 800-53, NIST 800-37, DoD RMF, eMASS, ACAS/Nessus, STIG implementation, and vulnerability management processes.
• Strong understanding of cybersecurity principles, risk management, security control implementation, and RMF package documentation development.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field preferred.
• Active DoD 8570/8140 compliant certification such as Security+, CAP, CASP+, CISSP, CISM, or equivalent.
• Active TS/SCI Clearance

Compensation for the RMF Cybersecurity Specialist include:

Salary Range: $158,000 - $168,000 depending on experience

Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Sick Leave as required by law

#LI-JM1 #LI-Onsite

Keywords

RMF Cybersecurity Specialist, Risk Management Framework, RMF, DoD Cybersecurity, NIST 800-53, NIST 800-37, Authorization to Operate, ATO, Authority to Connect, ATC, eMASS, ACAS, Nessus, Cybersecurity Compliance, Information Assurance, Security Controls, Continuous Monitoring, STIG Compliance, Vulnerability Management, Security Assessment Report, SAR, System Security Plan