DAO Rep

Waypoint Human Capital; Chantilly (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Waypoint's client seeks an experienced Designated Authorizing Official (DAO) Representative to support a National Reconnaissance Office program in Chantilly, VA. The role evaluates security packages, assesses cybersecurity risk, and ensures compliance prior to authorization decisions.

The candidate should have RMF/NIST SP 800-53 expertise, TS/SCI with poly, and the ability to brief senior government leadership on risk and findings.

Qualifications

• Active Top Secret/SCI clearance with Polygraph.
• IAM Level II certification (or higher).
• 7+ years of federal cybersecurity, RMF, or system accreditation experience.
• Bachelor's degree in a STEM discipline preferred.
• Experience with NIST SP 800-53 and RMF processes.

Responsibilities

• Evaluate and validate Security Authorization Packages (SAPs) and BoEs for completeness, accuracy, and compliance.
• Conduct technical reviews and risk assessments of NIST SP 800-53 controls to assess security posture.
• Coordinate as the primary liaison between System Owners, ISSOs, and the Designated Authorizing Official.
• Develop POA&Ms documenting deficiencies, corrective actions, and risk mitigation.
• Provide risk-based recommendations supporting informed authorization decisions.

Skills

Top Secret/SCI clearance with polylogh

IAM Level II certification

RMF experience

NIST SP 800-53 knowledge

A&A / RMF processes

ServiceNow

Education

Bachelor's degree in STEM

Tools

ServiceNow

Job description

Position Title: Designated Authorizing Official (DAO) Representative

Location: Chantilly, VA

Position Type: Full-Time, On-Site

Clearance: Active TS/SCI with Polygraph

Position Summary

Waypoint's client is seeking an experienced Designated Authorizing Official (DAO) Representative to support a mission-critical National Reconnaissance Office (NRO) program in Chantilly, Virginia. This position serves as a trusted advisor to the Designated Authorizing Official by evaluating system security authorization packages, assessing cybersecurity risk, and ensuring information systems meet established security requirements prior to authorization decisions.

The ideal candidate possesses extensive experience with the Risk Management Framework (RMF), NIST SP 800-53 security controls, and federal system accreditation processes, along with the ability to communicate technical risk to both technical teams and senior government leadership.

Key Responsibilities

• Evaluate and validate Security Authorization Packages (SAPs) and Bodies of Evidence (BoE) to ensure completeness, accuracy, and compliance with established security requirements.


• Conduct technical reviews and risk assessments of NIST SP 800-53 security controls to evaluate overall system security posture.


• Coordinate and serve as the primary liaison between System Owners, ISSOs, and the Designated Authorizing Official throughout the authorization process.


• Develop Plans of Action and Milestones (POA&Ms) documenting identified security deficiencies, recommended corrective actions, and risk mitigation strategies.


• Provide clear, risk-based recommendations that support informed authorization decisions and maintain compliance with Intelligence Community and DoD cybersecurity requirements.

Required Qualifications

• Active Top Secret/SCI clearance with Polygraph.


• IAM Level II certification (or higher).


• 7+ years of experience supporting federal cybersecurity, Risk Management Framework (RMF), or system accreditation activities.


• Bachelor's degree in a STEM discipline preferred.


• Demonstrated experience evaluating security authorization documentation and applying NIST SP 800-53 security controls.


• Experience supporting Assessment & Authorization (A&A) or RMF processes within the Department of Defense or Intelligence Community.


• Experience using ServiceNow is highly desirable.


• Self-starter who performs effectively with minimal supervision.


• Strong interpersonal and communication skills with the ability to collaborate across multidisciplinary teams.


• Ability to confidently brief senior government leadership on cybersecurity risks, findings, and recommendations