Cybersecurity & Accreditation Specialist

Cybersecurity Jobs; Suffolk (VA); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health benefits

Leadership training

401k with company matching

ESOP

Career development

Job summary

Cybersecurity Jobs seeks an experienced Cybersecurity/A&A Specialist to own the RMF/ A&A lifecycle for JWCC Azure environments and maintain audit-ready artifacts in eMASS to support ATOs.

You will drive evidence packages, coordinate with government leads, and ensure DoD RMF controls are implemented per NIST 800-37, 800-53 Rev 5, and DoD 8510.01, with required DoD 8570 IAM Level II certifications.

Qualifications

• U.S. citizenship required.
• Active Secret clearance required.
• Bachelor’s degree in Cybersecurity, Information Systems, or related field with 7+ years of DoD cybersecurity experience.
• Extensive experience authoring and managing RMF/eMASS packages for ATOs.
• Strong knowledge of NIST SP 800-37, SP 800-53 Rev 5, and DoD 8510.01.
• DoD 8570/8140 IAM Level II certification (e.g., CISSP, CISM, CAP/CGRC).
• Excellent problem-solving and communication skills.

Responsibilities

• Own end-to-end RMF package execution (Steps 1–6) in eMASS for Azure Government environments.
• Develop and maintain SSPs, Continuous Monitoring Plans, Security Assessment Reports, and POA&Ms.
• Assess and validate NIST and STIG requirements for RMF.
• Coordinate with government leads and assessors to defend security packages.
• Translate DoD Zero Trust requirements into verifiable RMF controls.

Skills

Active Secret clearance

CISSP/CISM/CAP/CGRC

Problem solving

Communication skills

Education

Bachelor's degree in Cybersecurity or related field

Tools

eMASS

Azure Government

RMF

NIST SP 800-37

NIST SP 800-53 Rev 5

DoD 8510.01

DISA SRG

STIG

Job description

The Cybersecurity & Accreditation Specialist will help remove accreditation bottlenecks for Joint Staff J7 JTSD by owning the Assessment and Authorization (A&A) lifecycle and maintaining audit-ready documentation in eMASS to support Authorizations to Operate (ATOs) for JWCC Azure environments.

Location and Work Model

Suffolk, VA (hybrid)

Role Responsibilities

• Manage end-to-end RMF package execution (Steps 1–6) in eMASS for systems migrating to Azure Government (IL5/IL6).
• Develop and maintain authorization artifacts including System Security Plans (SSP), Continuous Monitoring Plans, Security Assessment Reports, and Plan of Action and Milestones (POA&M).
• Assess and validate NIST SP 800-53 Rev 5 security controls, DISA Cloud Computing SRG requirements, and applicable STIG baselines.
• Coordinate with Primary Government Project Leads, Division ISSMs, and Security Control Assessor (SCA) representatives to defend and support security packages.
• Convert DoD Zero Trust mandate requirements into verifiable security controls within the defined RMF boundary.

Required Qualifications

• U.S. Citizenship
• Active Secret clearance
• Bachelor’s degree in Cybersecurity, Information Systems, or related field, plus 7+ years of dedicated DoD cybersecurity and accreditation experience
• Extensive, hands-on experience authoring and managing packages in eMASS through successful ATO awards
• Deep working command of NIST SP 800-37, NIST SP 800-53 Rev 5, and DoD Instruction 8510.01 (RMF)
• Current DoD 8570/8140 IAM Level II certification (examples: CISSP, CISM, or CAP/CGRC)
• Strong problem-solving skills and the ability to troubleshoot complex issues
• Effective communication and collaboration skills

Technologies and Frameworks

• eMASS
• Azure Government
• Azure Secret
• RMF
• NIST SP 800-37
• NIST SP 800-53 Rev 5
• DoD Instruction 8510.01
• DISA Cloud Computing SRG
• STIG

Benefits

• Great health benefits (for more info contact us directly)
• Leadership training
• 401k with generous company matching
• Employee Stock Ownership Plan (ESOP)
• Career professional development
• Tuition reimbursement
• Flexible hours
• Work/Life balance
• Rewards and recognition
• Paid Time Off
• Parental Leave

Preferred Qualifications

• Active Top Secret clearance with SCI eligibility
• Direct experience developing RMF authorization packages for systems hosted in Azure Government (IL5) or Azure Secret (IL6), leveraging FedRAMP High and DISA Provisional Authorizations (PAs)
• Familiarity with DevSecOps accreditation pathways, automated compliance evidence generation, and DoD Continuous ATO concepts
• Demonstrated experience translating DoD Zero Trust Reference Architecture requirements into eMASS control implementation statements
• Prior experience supporting Joint Staff, Combatant Command, or Army/Navy cyber accreditation workflows
• Strong technical documentation, briefing, and reporting experience