Information Assurance Specialist: RMF & Cloud Security

Astrion; Rockville (MD); On-site; USD 110,000 - 160,000; Full time

Job summary

Astrion is seeking an Information Assurance Support Analyst in Rockville, MD, supporting NRC-CPSS contract for the Civilian Division. The role requires obtaining NRC clearance, US citizenship, and a Secret clearance with 6+ years IT experience including IA expertise.

Key duties include SA&A support, RMF documentation, vulnerability management, FedRAMP review, and coordination with ISSOs and AO across the system lifecycle.

Qualifications

• BA/BS or 5 years equivalent experience.
• 6 years IT experience with 4 years IA specialization.
• Secret Clearance; ability to obtain NRC clearance; US citizenship required
• Must hold at least one of the listed certifications: Security+, CISSP, CISA, GIAC S/G, CEH, CAP, CASP+, CRISC, CCSK

Responsibilities

• Support FISMA systems through Security Assessment & Authorization (SA&A).
• Assess FIPS 199 security categorization for information systems.
• Develop and maintain RMF security documentation across all lifecycle phases.
• Analyze risks from security control assessments and monitoring activities.
• Perform vulnerability scans and config checks against DISA STIGs and CIS Benchmarks.
• Review FedRAMP security packages to document customer responsibility in cloud deployments.
• Assist in monthly CSP and annual third-party assessment reviews for FedRAMP compliance.
• Create and manage POA&Ms and monitor action items.
• Attend meetings with stakeholders to ensure security is addressed throughout the system lifecycle.

Skills

Security Clearance

US Citizenship

PowerShell scripting

Vulnerability scanning tools

Cloud platforms (Azure/AWS)

Education

BA/BS or 5 years equivalent experience

Tools

Tenable Security Center

DISA STIGs

CIS Benchmarks

SCAP

Job description

Astrion is seeking an Information Assurance Support Analyst in Rockville, MD, supporting NRC-CPSS contract for the Civilian Division. The role requires obtaining NRC clearance, US citizenship, and a Secret clearance with 6+ years IT experience including IA expertise.

Key duties include SA&A support, RMF documentation, vulnerability management, FedRAMP review, and coordination with ISSOs and AO across the system lifecycle.