Accreditation & Authorization Lead - TS/SCI Cleared - 174986 - 175283

Zachary Piper Solutions; Newington, Northern (VA, KY); On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

Comprehensive benefits

Flexible schedule

Growth opportunities

Job summary

Zachary Piper Solutions in Newington, VA seeks an Accreditation & Authorization Lead to ensure DoD and federal cybersecurity compliance throughout the RMF lifecycle, enabling mission success.

You will develop SSPs, SARs, POA&Ms, SCTMs and risk assessments, coordinate ATO/ATC, conduct vulnerability analyses, monitor remediation, and work with ISSOs, engineers, and government customers using eMASS, ACAS/Nessus and SCAP.

Active TS/SCI and 3+ years in RMF/federal environments are required.

Qualifications

• 3+ years supporting RMF/cybersecurity in federal/DoD environments.
• Active TS/SCI clearance.
• Hands-on RMF and ATO lifecycle experience.
• Knowledge of NIST 800-53/800-37 and DoD RMF.
• Experience with RMF package docs and vulnerability tools.

Responsibilities

• Lead RMF activities from categorization to authorization and continuous monitoring.
• Develop and maintain SSPs, SARs, POA&Ms, SCTMs, and risk assessments.
• Assess NIST 800-53 controls and federal cybersecurity standards.
• Coordinate ATO/ATC and periodic reauthorization activities.
• Conduct security reviews, vulnerability assessments, and risk analyses.
• Track remediation and ensure findings are resolved per timelines.
• Support continuous monitoring and cybersecurity audits.
• Collaborate with system owners, ISSOs/ISSMs, engineers, and government customers.
• Use eMASS, ACAS/Nessus, SCAP to maintain compliance.

Skills

RMF

NIST RMF

A&A lead

risk management

vulnerability management

eMASS

ACAS/Nessus

SCAP

security controls

Education

DoD 8570/8140 compliant certifications (Security+, CISSP, CAP, CASP+)

Tools

eMASS

ACAS/Nessus

SCAP

Job description

Zachary Piper Solutions is seeking an Accreditation & Authorization Lead to join a Federal Program located in Newington, VA. The Accreditation & Authorization Lead will play a critical role in ensuring systems maintain compliance with Department of Defense (DoD) and federal cybersecurity requirements while enabling mission success through effective risk management practices.

Responsibilities of the A&A Lead:

• Lead and support RMF activities throughout the system lifecycle, from system categorization through authorization and continuous monitoring.
• Develop, maintain, and update cybersecurity documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Reports (SARs)
  • Plans of Action and Milestones (POA&Ms)
  • Security Control Traceability Matrices (SCTMs)
  • Risk Assessment Reports
• Assess and validate compliance with NIST 800-53 security controls and applicable federal cybersecurity standards.
• Coordinate and support Authorization to Operate (ATO), Authority to Connect (ATC), and periodic reauthorization activities.
• Conduct security reviews, vulnerability assessments, and risk analyses to identify threats and mitigation strategies.
• Track remediation efforts and ensure cybersecurity findings are resolved in accordance with organizational timelines.
• Support continuous monitoring initiatives, vulnerability management, and cybersecurity audits.
• Collaborate with system owners, ISSOs, ISSMs, engineers, and government customers to ensure cybersecurity requirements are incorporated into system design and operations.
• Utilize tools such as eMASS, ACAS/Nessus, SCAP, and other cybersecurity platforms to maintain compliance and monitor security posture.

Qualifications of the A&A Lead:

• 3+ years of experience supporting RMF, cybersecurity compliance, or information assurance programs within a federal or DoD environment.
• Active TS/SCI Security Clearance
• Hands-on experience with the NIST RMF process and ATO lifecycle.
• Knowledge of:
  • NIST 800-53
  • NIST 800-37
  • DoD RMF
  • STIG implementation and compliance
  • Vulnerability management processes
• Experience developing and maintaining RMF package documentation.
• Familiarity with eMASS and vulnerability scanning tools such as ACAS/Nessus.
• Strong understanding of cybersecurity principles, risk management, and security control implementation.
• Active DoD 8570/8140 compliant certification such as Security+, CISSP, CAP, CASP+, or equivalent.

Compensation for the A&A Lead:

• Salary Range: $140,000+ *flexible based on experience*
• Comprehensive Benefits: Medical, Dental, Vision, PTO, and Sick Leave as required by law
• Flexible working schedule
• Unlimited opportunities for growth

#LI-CJ2

#LI-ONSITE

Key Words: rmf, security, cybersecurity, dod, cleared, federal, clearance, army, vulnverability, emass, risk management, nist, framework, stig, compliance, security plus, implementation, nessus, scap, nessus, issos, issms, sctms, poa, sar, ssp