RMF A&A Lead — DoD Cyber Compliance & Risk

Zachary Piper Solutions; Newington, Northern (VA, KY); Hybrid; USD 126,000 - 154,000; Full time

Benefits offered by this job

Comprehensive benefits

Flexible schedule

Growth opportunities

Job summary

Zachary Piper Solutions in Newington, VA seeks an Accreditation & Authorization Lead to ensure DoD and federal cybersecurity compliance throughout the RMF lifecycle, enabling mission success.

You will develop SSPs, SARs, POA&Ms, SCTMs and risk assessments, coordinate ATO/ATC, conduct vulnerability analyses, monitor remediation, and work with ISSOs, engineers, and government customers using eMASS, ACAS/Nessus and SCAP.

Active TS/SCI and 3+ years in RMF/federal environments are required.

Qualifications

• 3+ years supporting RMF/cybersecurity in federal/DoD environments.
• Active TS/SCI clearance.
• Hands-on RMF and ATO lifecycle experience.
• Knowledge of NIST 800-53/800-37 and DoD RMF.
• Experience with RMF package docs and vulnerability tools.

Responsibilities

• Lead RMF activities from categorization to authorization and continuous monitoring.
• Develop and maintain SSPs, SARs, POA&Ms, SCTMs, and risk assessments.
• Assess NIST 800-53 controls and federal cybersecurity standards.
• Coordinate ATO/ATC and periodic reauthorization activities.
• Conduct security reviews, vulnerability assessments, and risk analyses.
• Track remediation and ensure findings are resolved per timelines.
• Support continuous monitoring and cybersecurity audits.
• Collaborate with system owners, ISSOs/ISSMs, engineers, and government customers.
• Use eMASS, ACAS/Nessus, SCAP to maintain compliance.

Skills

RMF

NIST RMF

A&A lead

risk management

vulnerability management

eMASS

ACAS/Nessus

SCAP

security controls

Education

DoD 8570/8140 compliant certifications (Security+, CISSP, CAP, CASP+)

Tools

eMASS

ACAS/Nessus

SCAP

Job description

Zachary Piper Solutions in Newington, VA seeks an Accreditation & Authorization Lead to ensure DoD and federal cybersecurity compliance throughout the RMF lifecycle, enabling mission success.

You will develop SSPs, SARs, POA&Ms, SCTMs and risk assessments, coordinate ATO/ATC, conduct vulnerability analyses, monitor remediation, and work with ISSOs, engineers, and government customers using eMASS, ACAS/Nessus and SCAP.

Active TS/SCI and 3+ years in RMF/federal environments are required.