RMF A&A Specialist – Azure Gov & eMASS (Hybrid)

Cybersecurity Jobs; Suffolk (VA); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health benefits

Leadership training

401k with company matching

ESOP

Career development

Job summary

Cybersecurity Jobs seeks an experienced Cybersecurity/A&A Specialist to own the RMF/ A&A lifecycle for JWCC Azure environments and maintain audit-ready artifacts in eMASS to support ATOs.

You will drive evidence packages, coordinate with government leads, and ensure DoD RMF controls are implemented per NIST 800-37, 800-53 Rev 5, and DoD 8510.01, with required DoD 8570 IAM Level II certifications.

Qualifications

• U.S. citizenship required.
• Active Secret clearance required.
• Bachelor’s degree in Cybersecurity, Information Systems, or related field with 7+ years of DoD cybersecurity experience.
• Extensive experience authoring and managing RMF/eMASS packages for ATOs.
• Strong knowledge of NIST SP 800-37, SP 800-53 Rev 5, and DoD 8510.01.
• DoD 8570/8140 IAM Level II certification (e.g., CISSP, CISM, CAP/CGRC).
• Excellent problem-solving and communication skills.

Responsibilities

• Own end-to-end RMF package execution (Steps 1–6) in eMASS for Azure Government environments.
• Develop and maintain SSPs, Continuous Monitoring Plans, Security Assessment Reports, and POA&Ms.
• Assess and validate NIST and STIG requirements for RMF.
• Coordinate with government leads and assessors to defend security packages.
• Translate DoD Zero Trust requirements into verifiable RMF controls.

Skills

Active Secret clearance

CISSP/CISM/CAP/CGRC

Problem solving

Communication skills

Education

Bachelor's degree in Cybersecurity or related field

Tools

eMASS

Azure Government

RMF

NIST SP 800-37

NIST SP 800-53 Rev 5

DoD 8510.01

DISA SRG

STIG

Job description

Cybersecurity Jobs seeks an experienced Cybersecurity/A&A Specialist to own the RMF/ A&A lifecycle for JWCC Azure environments and maintain audit-ready artifacts in eMASS to support ATOs.

You will drive evidence packages, coordinate with government leads, and ensure DoD RMF controls are implemented per NIST 800-37, 800-53 Rev 5, and DoD 8510.01, with required DoD 8570 IAM Level II certifications.