DoD RMF A&A Lead, TS/SCI – Risk & Authorization Expert

Piper Companies; Newington (VA); On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

Medical benefits

Flexible schedule

Growth opportunities

PTO and sick leave

Job summary

Zachary Piper Solutions in Newington, VA seeks an Accreditation & Authorization Lead to oversee RMF activities across the system lifecycle in a DoD/federal program. You will prepare SSPs, SARs, POA&Ms, SCTMs, and risk reports, support ATO/ATC processes, conduct vulnerability reviews, and coordinate with ISSOs, engineers, and government customers to embed cybersecurity requirements in design and operations.

The role requires 3+ years in RMF/compliance in a federal or DoD setting, a TS/SCI

Qualifications

• 3+ years RMF/compliance or information assurance in federal/DoD environment.
• Active TS/SCI Security Clearance.
• Hands-on with NIST RMF process and ATO lifecycle.
• Knowledge of NIST 800-53/800-37, DoD RMF, STIGs, vulnerability management.
• Experience developing RMF package documents.
• Familiar with eMASS and tools like ACAS/Nessus.
• Strong cybersecurity principles, risk management and controls.
• Active DoD 8570/8140 certifications (Security+, CISSP, CAP, CASP+).

Responsibilities

• Lead RMF activities across system lifecycle from categorization to continuous monitoring.
• Develop and maintain SSPs, SARs, POA&Ms, SCTMs, and risk reports.
• Assess compliance with NIST 800-53 and related standards.
• Coordinate ATO/ATC and periodic reauthorization.
• Conduct security reviews, vulnerability assessments, and risk analyses.
• Track remediation and ensure findings are closed on schedule.
• Support continuous monitoring, vulnerability management and audits.
• Collaborate with system owners, ISSOs/ISSMs, engineers and government customers.
• Utilize eMASS, ACAS/Nessus, SCAP and other platforms to monitor posture.

Skills

RMF process

Risk management

Cybersecurity

Information assurance

Security clearance

Tools

eMASS

ACAS/Nessus

SCAP

Job description

Zachary Piper Solutions in Newington, VA seeks an Accreditation & Authorization Lead to oversee RMF activities across the system lifecycle in a DoD/federal program. You will prepare SSPs, SARs, POA&Ms, SCTMs, and risk reports, support ATO/ATC processes, conduct vulnerability reviews, and coordinate with ISSOs, engineers, and government customers to embed cybersecurity requirements in design and operations.

The role requires 3+ years in RMF/compliance in a federal or DoD setting, a TS/SCI