RMF Information Assurance Specialist (DoD A&A)

Strategic ACI; Alexandria (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Strategic ACI is seeking an on-site Information Assurance (IA) Specialist to manage RMF processes and DoD compliance. The role centers on developing and maintaining security artifacts such as SSPs and POA&Ms, and coordinating with the government to ensure approvals.

The ideal candidate has TS/SCI clearance and 5+ years in cybersecurity with RMF experience, including hands-on use of eMASS. Travel up to 25% may be required for CONUS/OCONUS locations.

Qualifications

• Active TS/SCI clearance required.
• 5+ years of cybersecurity experience.
• 3+ years proficiency in RMF processes.
• Experience using eMASS to manage A&A.
• DoD 8570.01-M IAM Level I or II certifications such as CISSP, CISA, Security+.

Responsibilities

• Provide guidance in developing, reviewing, and maintaining BOE such as SSPs, POA&Ms, STIGs; give strategic DoD/Army recommendations.
• Validate resolution of vulnerabilities documented in POA&Ms and provide evidence for approval.
• Support on-site and remote accreditation testing for CONUS/OCONUS locations; travel up to 25%.
• Ensure security concerns and incidents are reported to ISSMs and managed timely.
• Provide guidance on NIST SP 800-53 for managing security controls.
• Assist in creating or modifying FISMA documentation like Contingency Plans and Incident Response Plans.
• Evaluate system risk at network, system, and application levels.
• Evaluate vulnerability/STIG results and manage findings in eMASS.
• Maintain contact with government POCs to report concerns and propose COAs.

Skills

RMF processes

eMASS

A&A experience

DoD 8570 IAM I/II

Security certifications

Vulnerability management

Independent worker

Tools

eMASS tool

POA&Ms

SSP development

Job description

Strategic ACI is seeking an on-site Information Assurance (IA) Specialist to manage RMF processes and DoD compliance. The role centers on developing and maintaining security artifacts such as SSPs and POA&Ms, and coordinating with the government to ensure approvals.

The ideal candidate has TS/SCI clearance and 5+ years in cybersecurity with RMF experience, including hands-on use of eMASS. Travel up to 25% may be required for CONUS/OCONUS locations.