Assessment and Authorization Specialist III - Remote

Akima; Washington (District of Columbia); Hybrid; USD 150,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) retirement plan

Paid Time Off (PTO)

Job summary

Akima Mission Optimization (AMO) seeks an experienced A&A Specialist III to oversee security and privacy control assessments across DOE systems. You will identify risks, document deficiencies, and guide remediation, supporting cloud (SaaS/PaaS/IaaS) and on-prem environments.

Strong RMF/NIST expertise and clear reporting are essential for this remote role in the United States. You will coordinate findings, manage data calls for audits, and ensure controls meet required standards, while

Qualifications

• Bachelor's Degree or four years of equivalent professional experience.
• Minimum of 5-7 years of relevant experience conducting security control assessments and cybersecurity evaluations.
• Experience overseeing assessments and collaborating with SAT, SCA, ISSO, TPOC, System Owners, and Assessment Coordinators.
• Strong understanding of NIST 800-53, NIST CSF, and related laws and regulations.
• Demonstrated oversight of assessments aligned with federal frameworks (NIST RMF, NIST SP 800-53).
• Ability to analyze technical documentation, identify gaps, and communicate findings clearly in reports.
• Understanding of continuous monitoring and system inheritance concepts.
• Ability to work independently and in teams; DOE background investigation and DOE Q clearance capability.

Responsibilities

• Oversee and lead comprehensive assessments of security and privacy controls to determine effectiveness.
• Lead evaluation and documentation of deficiencies and recommend corrective actions to mitigate vulnerabilities.
• Prepare detailed security and privacy assessment reports and deliver to Team Leaders for review.
• Oversee assessments in accordance with approved assessment plans.
• Oversee initial remediation actions on deficient controls and reassess for effectiveness.
• Assess system-specific and inherited controls as part of continuous monitoring.
• Apply knowledge to complex assignments and contribute to deliverables and performance metrics.

Skills

Security control assessments

NIST SP 800-53 knowledge

NIST Cybersecurity Framework

RMF experience

Report writing

Independent yet collaborative work

Education

Bachelor's Degree or four years of equivalent professional experience

Job description

The Office of the Chief Information Officer (OCIO) advances the Department of Energy's (DOE) mission by establishing and implementing policies, standards, and services that meet mission requirements, balance risk and innovation, and define clear performance expectations across the enterprise information ecosystem. The OCIO is committed to continuously improving information technology (IT) services and strengthening the Department's cybersecurity posture to enable mission execution while ensuring responsible stewardship of taxpayer dollars through efficient, effective, and innovative management practices.

The A&A Specialist III (Mid-Level) supports this mission by overseeing and conducting comprehensive assessments of security and privacy controls,identifyingrisks, and recommending corrective actions to ensure DOE systems meet all required cybersecurity and privacy standards. This position also oversees and responds to system- and security-related data calls, research, and analysis as requested from DOE.

Responsibilities

• Oversee and lead comprehensive assessments of implemented security and privacy controls and control enhancements to determineeffectiveness, including whether controls are implemented correctly,operatingas intended, and producing desired outcomes.
• Lead the evaluation and documentation of the severity of deficiencies identified during assessments and provide proper oversight and guidance in recommending appropriate corrective actions to mitigate vulnerabilities.
• Lead preparation of detailed security and privacy assessment reports outlining results, findings, and recommendations, anddeliverthese to Team Leaders for review and decision-making.
• Oversee the assessment of controlsin accordance withassessment procedures defined in approved assessment plans.
• Oversee and conduct initial remediation actions on deficient controls and perform reassessments on remediated controls tovalidateeffectiveness.
• Assess both system-specific and inherited controls as part of the Department's continuous monitoring strategy.
• Apply comprehensive knowledge to multiple complex assignments and contribute to deliverables and performance metrics asrequired.

Assessment and Authorization Duties:

• Oversee assessments of existing and new NIST and FISMA systems, including subsystems within respective system boundaries, communicate results, articulate potential implications of identified control weaknesses, and work to document through artifacts and documentation.
• Lead and oversee assessments within Cloud environments such as SaaS, PaaS, and IaaS, and systems and platforms within an on-prem environment.
• Lead and oversee the review, analysis, and creation of Assessment & Authorization (A&A) packages to include Assessment Readiness Workbooks (ARW), Security Assessment Plans (SAP), Security Assessment Reports (SARs), and Risk Assessments for completeness, accuracy, and effectiveness of controls.
• Lead and oversee the review, analysis, and creation of findings packages outlining identified findings, weaknesses, remediation, and provide an overview during findings meeting reviews.
• Oversee the review of significant system change requests, deviation requests, and provide oversight and leadership on potential system or system security impacts.
• Review and analyze vulnerability scan reports, test reports, and Plan of Action & Milestones (POA&Ms), Hardware/Software lists, Network Diagrams, Data Flows, System Change Requests/Proposal, for completeness, accuracy, effectiveness of controls, and plans and procedures implementation.
• Review identified and documented findings and provide oversight, leadership, and recommendations to support documentation, rationalization, and subsequent remediation efforts.
• Oversee and lead security-and system-related data calls for internal and external audits such as FISMA and data calls as requested.

Qualifications

• Bachelor's Degree orfour (4) years of equivalent professional experience.
• Minimum of 5-7 years of relevant experience conducting security control assessments, cybersecurity evaluations, or similar technical security work.
• Experience overseeing and participating in assessments and working with Security Assessment Teams (SAT), Security Control Assessors (SCA), Information System Security Officers (ISSO), Technical Points of Contact (TPOC), System Owners, and Assessment Coordinators.
• Possesses a strong understanding of the NIST Special Publication 800-53 security and privacy controls, the NIST Cybersecurity Framework, and other information security and privacy laws and regulations.
• Demonstrated oversight experience assessing security and privacy controls aligned with federal cybersecurity frameworks (e.g., NIST RMF, NIST SP 800-53).
• Ability to analyze technical documentation,identifysecurity gaps, and communicate findings clearly in written reports.
• Strong understanding of continuous monitoring processes and system inheritance concepts.
• Ability to work independently and collaboratively on complex assignments requiring sound judgment and comprehensive technical knowledge.
• Ability to complete a DOE background investigation and obtain federal government clearance for access to federal systems.
• Ability to obtain DOE Q clearance.

Job ID

2026-25981

Work Type

Remote

Pay Range

$150,000 - $160,000

Benefits

• Regular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees.

Company Description

Work Where it Matters

Akima Mission Optimization (AMO), an Akima company, is not just another federal logistics contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At AMO, the work you do every day makes a difference in the lives of our 15,000 Inupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders, AMO provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers, AMO delivers innovative administrative support services that streamline operations, and enhance productivity.

As an AMO employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.