DoD RMF A&A Lead: Cybersecurity & Compliance

Piper Companies; Newington (VA); On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

Medical, Dental, Vision benefits

PTO & Sick Leave

Flexible schedule

Growth opportunities

Job summary

Zachary Piper Solutions is seeking an Accreditation & Authorization Lead for a Federal Program in Newington, VA. You will drive RMF activities across the system lifecycle, ensuring DoD and federal cybersecurity requirements are met while enabling mission success.

Responsibilities include developing SSPs/SARs/POA&Ms, coordinating ATO/ATC, and conducting risk analyses with government customers. Active TS/SCI clearance and experience with eMASS and vulnerability management are required.

Qualifications

• 3+ years of experience supporting RMF/cybersecurity compliance in a federal/DoD environment.
• Active TS/SCI security clearance.
• Hands-on with NIST RMF and ATO lifecycle.
• Knowledge of NIST 800-53, NIST 800-37, DoD RMF, STIGs, vulnerability management.

Responsibilities

• Lead RMF activities from system categorization to authorization and continuous monitoring.
• Develop and maintain cybersecurity documentation (SSPs, SARs, POA&Ms, SCTMs, Risk Assessments).
• Assess compliance with NIST 800-53 and applicable standards.
• Coordinate ATO/ATC and periodic reauthorizations.

Skills

RMF knowledge

Cybersecurity risk management

NIST RMF process

Vulnerability management

DoD RMF

eMASS familiarity

Vulnerability scanning (ACAS/Nessus)

Security controls implementation

Education

Active TS/SCI clearance

DoD 8570/8140 compliant certification (Security+, CISSP, CAP, CASP+ or equivalent)

Tools

eMASS

ACAS/Nessus

SCAP

Job description

Zachary Piper Solutions is seeking an Accreditation & Authorization Lead for a Federal Program in Newington, VA. You will drive RMF activities across the system lifecycle, ensuring DoD and federal cybersecurity requirements are met while enabling mission success.

Responsibilities include developing SSPs/SARs/POA&Ms, coordinating ATO/ATC, and conducting risk analyses with government customers. Active TS/SCI clearance and experience with eMASS and vulnerability management are required.