RMF A&A Lead — DoD/TS SCI, Flexible Schedule

Zachary Piper, LLC; Newington (VA); On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

Medical benefits

Flexible schedule

Career growth

Job summary

Zachary Piper Solutions is seeking an Accreditation & Authorization Lead to join a Federal Program in Newington, VA. The role focuses on RMF lifecycle activities, DoD/NIST compliance, and continuous monitoring to enable mission success.

The candidate will develop key security documentation, coordinate ATO/ATC, perform risk analyses, and collaborate with government customers and engineers to embed cybersecurity in system design.

Qualifications

• 3+ years supporting RMF/cybersecurity in DoD/federal environments.
• Active TS/SCI security clearance.
• Hands-on with NIST RMF process and ATO lifecycle.
• Knowledge of NIST 800-53 and 800-37; DoD RMF; STIGs.
• Experience developing RMF package docs (SSP, SAR, POA&Ms).
• Familiarity with eMASS and vulnerability tools (ACAS/Nessus).
• Strong cybersecurity principles, risk management, and controls implementation.
• DoD 8570/8140-compliant certification such as Security+, CISSP, CAP, CASP+.

Responsibilities

• Lead RMF activities across system lifecycle from categorization to continuous monitoring.
• Develop and maintain cybersecurity documentation (SSPs, SARs, POA&Ms, SCTMs).
• Assess compliance with NIST 800-53 and federal standards.
• Coordinate ATO/ATC and periodic reauthorizations.
• Conduct reviews, vulnerability assessments, and risk analyses.
• Track remediation and ensure findings are resolved on schedule.
• Support continuous monitoring, vulnerability management, and audits.
• Collaborate with system owners, ISSOs/ISSMs, engineers, and government customers.

Skills

RMF experience

Security clearance TS/SCI

NIST RMF process

ATO lifecycle

Vulnerability management

eMASS usage

Tools

eMASS

ACAS/Nessus

SCAP

Job description

Zachary Piper Solutions is seeking an Accreditation & Authorization Lead to join a Federal Program in Newington, VA. The role focuses on RMF lifecycle activities, DoD/NIST compliance, and continuous monitoring to enable mission success.

The candidate will develop key security documentation, coordinate ATO/ATC, perform risk analyses, and collaborate with government customers and engineers to embed cybersecurity in system design.