RMF & A&A Lead – DoD Cybersecurity Expert

ZP Group; Newington (VA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

PTO & Sick Leave

Flexible schedule

Growth opportunities

Job summary

Zachary Piper Solutions is seeking an Accreditation & Authorization Lead to join a Federal Program in Newington, VA. The role focuses on ensuring DoD and federal cybersecurity compliance through robust RMF activities and risk management.

The candidate will develop and maintain RMF documentation (SSPs, SARs, POA&Ms, SCTMs) and lead ATO/ATC efforts while collaborating with ISSOs, engineers, and government customers to embed secure design and operations. TS/SCI clearance required or active.

Qualifications

• 3+ years of RMF and cybersecurity compliance experience in federal/DoD environments.
• Active TS/SCI security clearance.
• Hands-on with NIST RMF process and ATO lifecycle.
• Knowledge of NIST 800-53, 800-37, DoD RMF, STIGs, vulnerability management.
• Experience developing and maintaining RMF package documentation.

Responsibilities

• Lead RMF activities through system lifecycle, including authorization and continuous monitoring.
• Develop and update SSPs, SARs, POA&Ms, SCTMs, and risk assessment reports.
• Validate compliance with NIST 800-53 controls and federal standards.
• Coordinate ATO/ATC and reauthorization activities.
• Conduct security reviews, vulnerability assessments, and risk analyses.

Skills

RMF experience

Risk assessment

Security controls knowledge

Vulnerability management

NIST standards knowledge

Tools

eMASS

ACAS

Nessus

SCAP

Job description

Zachary Piper Solutions is seeking an Accreditation & Authorization Lead to join a Federal Program in Newington, VA. The role focuses on ensuring DoD and federal cybersecurity compliance through robust RMF activities and risk management.

The candidate will develop and maintain RMF documentation (SSPs, SARs, POA&Ms, SCTMs) and lead ATO/ATC efforts while collaborating with ISSOs, engineers, and government customers to embed secure design and operations. TS/SCI clearance required or active.