Security Compliance Lead - Federal A&A (Remote)

Johnson Technology Systems Inc; Reston (VA); Hybrid; USD 129,000 - 134,000; Full time

Job summary

Johnson Technology Systems Inc. seeks a Security Compliance SME to attain ATO/ATO, manage eMASS entries, and oversee ACAS vulnerability scanning in a DISA IL5 enclave. You will craft SSP/ACP/PoAM artifacts and coordinate with 3PAO for FedRAMP changes.

Required 5+ years leading FedRAMP or FISMA Moderate authorizations, with strong technical writing, risk assessment, and incident response coordination. Remote-friendly with local to Herndon, VA preferred, onsite 4 days if local.

Qualifications

• 5+ yrs leading A&A for a FedRAMP or FISMA Moderate system through authorization and continuous monitoring.
• Demonstrated ownership of a FedRAMP significant change request, including direct 3PAO coordination (SAP scoping, evidence packages, test support, SAR adjudication).
• Expert authorship of SSP control implementation statements against the NIST SP 800-53 Rev 5 Moderate baseline.
• Security impact analysis, change type determination, and risk-based recommendations to an AO.
• POA&M management, deviation requests, and monthly ConMon reporting.

Responsibilities

• Attain an Authority to Connect and an Authority to Operate in a DISA IL5 security enclave; manage eMASS entries and profile.
• Oversee ACAS platform and run daily vulnerability scans.
• Assist in developing SSP, System Security Plan, System Assessment Plan, and related artifacts; support PoAM and contingency planning.

Skills

FedRAMP A&A

3PAO coordination

SSP control statements

Vulnerability management

Configuration management

AO risk guidance

ConMon reporting

UiPath knowledge

Tools

eMASS

ACAS

UiPath

Job description

Johnson Technology Systems Inc. seeks a Security Compliance SME to attain ATO/ATO, manage eMASS entries, and oversee ACAS vulnerability scanning in a DISA IL5 enclave. You will craft SSP/ACP/PoAM artifacts and coordinate with 3PAO for FedRAMP changes.

Required 5+ years leading FedRAMP or FISMA Moderate authorizations, with strong technical writing, risk assessment, and incident response coordination. Remote-friendly with local to Herndon, VA preferred, onsite 4 days if local.