Lead IA Security – DoD RMF & Cloud Fort Meade

ASRC Federal; Fort Meade, Northern (MD, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

ASRC Federal seeks a Lead Information Assurance Security Specialist to lead RMF implementation for the DISA JPES/JCRM program at Fort Meade. The role oversees ATO sustainment, vulnerability remediation, and secure DevSecOps integration across multi-enclave environments, including Azure IL6 and SIPR.

The senior position requires a Secret clearance, DoD experience, and collaboration with government cybersecurity personnel to maintain a robust security posture while enabling agile delivery.

Qualifications

• Bachelor’s degree required; four years of additional experience may substitute a degree.
• At least 10 years of Information Assurance, RMF, or cybersecurity experience in DoD environments.
• Direct RMF, eMASS, ATO sustainment, STIG validation, vulnerability management, and POA&M remediation experience.
• Experience securing containerized apps and Kubernetes environments.
• Experience with Azure IL6, SIPR, or comparable classified DoD-hosted environments.
• Security+ or DoD 8140 qualification; CISSP preferred.
• Active Secret clearance at hire.

Responsibilities

• Lead RMF lifecycle activities and maintain artifacts in eMASS.
• Support ATO authorization and continuous monitoring activities.
• Implement and validate STIGs for RHEL, Kubernetes, Tomcat, PostgreSQL, and web components.
• Direct ACAS/Nessus vulnerability scanning and analysis.
• Coordinate application security testing with Fortify or equivalent SAST/DAST.
• Manage POA&M development, remediation, and evidence.
• Translate findings into prioritized Agile backlog and sprint work.
• Advise on security patterns for Azure IL6, Kubernetes, and multi-enclave deployments.
• Provide security metrics and status updates to leadership.

Skills

RMF

eMASS

Vulnerability management

DevSecOps

SAST/DAST

Education

Bachelor’s degree in engineering, cybersecurity, computer science, information technology

Tools

Fortify

ACAS/Nessus

eMASS

Job description

ASRC Federal seeks a Lead Information Assurance Security Specialist to lead RMF implementation for the DISA JPES/JCRM program at Fort Meade. The role oversees ATO sustainment, vulnerability remediation, and secure DevSecOps integration across multi-enclave environments, including Azure IL6 and SIPR.

The senior position requires a Secret clearance, DoD experience, and collaboration with government cybersecurity personnel to maintain a robust security posture while enabling agile delivery.