OSCAL Security Controls SME | TS/SCI | Hybrid

Koniag Services, Inc.

Alexandria (VA)

Hybrid

USD 140,000 - 210,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) with company matching

Paid holidays

3 weeks PTO

Job summary

Koniag IT Systems, a Koniag Government Services company, seeks an OSCAL SME with an active TS/SCI to design, implement, and optimize automated security compliance solutions for a federal program in Alexandria, VA. This hybrid role requires 1–4 days onsite weekly.

Responsibilities include developing OSCAL-based artifacts (SSPs, assessment plans, POA&Ms), mapping controls to OSCAL models, supporting ATO workflows, and delivering training and best practices to internal teams and customers.

Qualifications

Bachelor’s degree or equivalent work experience in a related field.
15+ years of experience in cybersecurity compliance, security assessment, or risk management.
Hands-on expertise with OSCAL schema, XML/JSON/YAML, and validation tools.
Deep knowledge of NIST SP-800-53 Rev.5, SP-800-37 Rev.2 RMF, CSF 2.0 and federal standards (FedRAMP, FISMA, DoD RMF).
Experience with cybersecurity documentation automation and GRC platforms.
Excellent communication and technical writing skills.
Ability to work on-site 1-4 days a week.

Responsibilities

Serve as the technical expert for OSCAL adoption and integration in federal programs.
Develop, validate, and maintain OSCAL-based artifacts (SSPs, plans, POA&Ms).
Map security controls to OSCAL models and align with NIST standards.
Support automation of ATO/authorization workflows with GRC tools.
Collaborate with owners, assessors, and compliance teams to improve efficiency.
Deliver training and best practices on OSCAL adoption.
Stay current with OSCAL standards and federal policy changes.