RMF A&A Program Lead – DoD Cybersecurity Expert

After The Badge Jobs; Monterey (CA); On-site; USD 131,000 - 222,000; Full time

Job summary

ICF is seeking an experienced Authorization & Accreditation (A&A) Program Lead to support a DHRA cybersecurity program. You will manage RMF activities, guide policy implementation, and ensure quality authorization packages for multiple DHRA information systems.

You will lead RMF analysts and documentation specialists, develop SAPs/SSPs/SARs/POA&Ms, and interface with AOs, ISSMs, and ISSOs to coordinate schedules and deliverables. A US security clearance and citizenship are required.

Qualifications

• Bachelor’s degree in a technical discipline required.
• Minimum 10 years of progressively responsible cybersecurity risk management or RMF execution experience.
• Experience in RMF policy, processes, and documentation development required.
• Experience leading A&A or ISSM/ISSO teams through authorization cycles.
• Active US Government security clearance and US citizenship required.
• Current certification in at least one: CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC.

Responsibilities

• Oversee RMF lifecycle for DHRA information systems in line with NIST DoD standards.
• Serve as primary RMF point of contact for DHRA system owners and stakeholders.
• Lead RMF analysts, assessors, and documentation specialists.
• Develop and maintain SAPs, SSPs, SARs, and POA&Ms.
• Ensure compliant RMF controls across DHRA environments.
• Review control implementations, risk assessments, and authorization docs.
• Coordinate with AOs, ISSMs, ISSOs to schedule authorization packages.
• Support continuous monitoring, vulnerability management, and risk mitigation.
• Track ATO timelines, renewal cycles, and compliance posture.
• Advise leadership on RMF requirements and security posture impacts.

Skills

RMF lifecycle

A&A leadership

Risk management

RMF policy

Stakeholder engagement

Education

Bachelor’s degree in a technical discipline

Master’s degree (preferred)

Tools

eMASS

ACAS

STIG Viewer

Job description

ICF is seeking an experienced Authorization & Accreditation (A&A) Program Lead to support a DHRA cybersecurity program. You will manage RMF activities, guide policy implementation, and ensure quality authorization packages for multiple DHRA information systems.

You will lead RMF analysts and documentation specialists, develop SAPs/SSPs/SARs/POA&Ms, and interface with AOs, ISSMs, and ISSOs to coordinate schedules and deliverables. A US security clearance and citizenship are required.