Info Assurance Specialist III: RMF & Cloud Security Lead

OneZero Solutions; Arlington (VA); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off & holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions is recruiting Information Assurance Specialists to support the DSCA, delivering Risk Management Framework (RMF) and Cybersecurity Risk Management Construct (CSRMC) across ~25 systems. You will serve as ISSO, SCA-Validator, and work within a cloud-native AWS DevSecOps environment, owning authorization packages in eMASS and driving automated compliance.

This role requires on-site work at DSCA facilities in Mechanicsburg, PA or Arlington, VA, and an active SECRET clearance.

Qualifications

• Minimum 3 years in Information Assurance with RMF execution and POA&M management.
• Active DoD 8570/8140‑compliant certification (612/722) — Security+ CE minimum.
• Active SECRET clearance and US citizenship at start of performance.
• Knowledge of NIST SP 800-53 Rev 5 and RMF, FISMA, and DoD policy.

Responsibilities

• Manage A&A packages through RMF/CSRMC lifecycle in eMASS.
• Support A&A, ATO, and cATO accreditations and attestations.
• Assess security controls across cloud-native and traditional services.
• Conduct SCA/SCA-V assessments with plan execution and validation.
• Develop RMF documentation: SSPs, SAPs, SARs, POA&M, risk assessments.
• Leverage CaC outputs to validate compliance in eMASS.
• Monitor CI/CD security tooling and coordinate remediation.
• Brief stakeholders on findings, risk posture, and remediation strategy.
• Support incident response for cloud-native systems.

Skills

RMF execution

Security control assessment

POA&M management

Continuous monitoring

NIST 800-53

Education

Bachelor's degree in IT/CS/Engineering/Cybersecurity

Tools

eMASS

AWS Security Hub

AWS Inspector

AWS Config

ACAS/Tenable Nessus

Job description

OneZero Solutions is recruiting Information Assurance Specialists to support the DSCA, delivering Risk Management Framework (RMF) and Cybersecurity Risk Management Construct (CSRMC) across ~25 systems. You will serve as ISSO, SCA-Validator, and work within a cloud-native AWS DevSecOps environment, owning authorization packages in eMASS and driving automated compliance.

This role requires on-site work at DSCA facilities in Mechanicsburg, PA or Arlington, VA, and an active SECRET clearance.