Accreditation & Authorization Lead - 175112

ZP Group; Fort Belvoir (VA); On-site; USD 158,000 - 168,000; Full time

Benefits offered by this job

PTO

Paid Holidays

Medical

Dental

Vision

401K

Sick Leave

Job summary

Zachary Piper Solutions is seeking an RMF Cybersecurity Specialist to support federal and DoD environments from on-site Fort Belvoir, VA. The role focuses on RMF activities, authorization, and maintaining security throughout the system lifecycle.

Join a mission-driven team protecting national security systems. Candidates should have 3+ years RMF experience, strong NIST knowledge, and active TS/SCI clearance. Competitive compensation and full benefits package offered.

Qualifications

• 3+ years supporting RMF in DoD or federal environments.
• Experience with NIST RMF, NIST 800-53, NIST 800-37, and STIG.
• Active DoD 8570/8140 certs like Security+, CAP, CASP+, CISSP, CISM.
• Active TS/SCI clearance.

Responsibilities

• Lead RMF activities across the system lifecycle, including categorization, control implementation, authorization, and monitoring.
• Develop and maintain cybersecurity documentation such as SSPs, SARs, POA&Ms, SCTMs, and Risk Assessment Reports.
• Assess compliance with NIST 800-53/800-37, DoD RMF, and STIG standards.
• Support ATO/ reauthorization, vulnerability assessments, risk analyses, and audits.
• Utilize eMASS, ACAS/Nessus, and related tools to monitor posture and drive remediation.

Skills

RMF process understanding

Risk assessment

Security documentation

DoD/federal cybersecurity

Education

Bachelor's degree in Cybersecurity/IS/CS

Tools

eMASS

ACAS/Nessus

Job description

Zachary Piper Solutions is seeking an RMF Cybersecurity Specialist to support a company focused on protecting critical government systems through cybersecurity compliance, risk management, and accreditation efforts within federal and DoD environments. This position is on-site at Fort Belvoir, VA. The RMF Cybersecurity Specialist will lead and support Risk Management Framework (RMF) activities to ensure systems maintain compliance, achieve authorization, and remain secure throughout their lifecycle. Join a mission-driven team responsible for safeguarding national security systems and enabling secure operations across complex federal environments.

Responsibilities for the RMF Cybersecurity Specialist include:

• Lead RMF activities throughout the system lifecycle, including system categorization, security control implementation, authorization, and continuous monitoring.
• Develop and maintain cybersecurity documentation, including SSPs, SARs, POA&Ms, SCTMs, and Risk Assessment Reports.
• Assess compliance with NIST 800-53, NIST 800-37, DoD RMF requirements, and STIG implementation standards.
• Support ATO, ATC, reauthorization efforts, vulnerability assessments, risk analyses, and cybersecurity audits.
• Utilize eMASS, ACAS/Nessus, and related cybersecurity tools to monitor security posture, track remediation efforts, and support compliance initiatives.

Required Qualifications for the RMF Cybersecurity Specialist include:

• 3+ years of experience supporting RMF, cybersecurity compliance, information assurance, or security authorization efforts within DoD or federal environments.
• Hands-on experience with NIST RMF, NIST 800-53, NIST 800-37, DoD RMF, eMASS, ACAS/Nessus, STIG implementation, and vulnerability management processes.
• Strong understanding of cybersecurity principles, risk management, security control implementation, and RMF package documentation development.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field preferred.
• Active DoD 8570/8140 compliant certification such as Security+, CAP, CASP+, CISSP, CISM, or equivalent.
• Active TS/SCI Clearance

Compensation for the RMF Cybersecurity Specialist include:

Salary Range: $158,000 - $168,000 depending on experience

Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Sick Leave as required by law

Keywords

RMF Cybersecurity Specialist, Risk Management Framework, RMF, DoD Cybersecurity, NIST 800-53, NIST 800-37, Authorization to Operate, ATO, Authority to Connect, ATC, eMASS, ACAS, Nessus, Cybersecurity Compliance, Information Assurance, Security Controls, Continuous Monitoring, STIG Compliance, Vulnerability Management, Security Assessment Report, SAR, System Security Plan