Senior Security Compliance Lead—FedRAMP/A&A IL5

NewGen Technologies; Herndon (VA); On-site; USD 120,000 - 190,000; Full time

Job summary

NewGen Technologies is seeking a Security Compliance SME to drive the Authority to Connect and Authority to Operate for a DISA Impact Level 5 enclave. You will manage eMASS entries, the eMASS profile, and the ACAS platform, and run daily vulnerability scans.

You will contribute to the development of the System Security Plan, System Assessment Plan, and Contingency and Incident Response artifacts, ensuring rigorous documentation and compliance across programs.

Qualifications

• U.S. Citizenship with active MBI clearance.
• 5+ years leading A&A for FedRAMP or FISMA Moderate systems.
• Direct 3PAO coordination for significant changes and SAR adjudication.
• Expert SSP control implementation statements per NIST SP 800-53 Rev 5 Moderate baseline.
• Security risk analysis, POA&M management, and ConMon reporting.
• Proficient in technical writing and MS Excel/Word.

Responsibilities

• Attain Authority to Connect and Authority to Operate for a DISA IL5 enclave.
• Manage eMASS entries and eMASS profile.
• Oversee ACAS platform and conduct daily vulnerability scans.
• Support development of SSP, SAP, POA&M, Contingency, Incident Response, and CM plans.
• Document System and Communications Protection artifacts.

Skills

US Citizenship

MBI Clearance

A&A leadership

FedRAMP/FISMA Moderate

3PAO coordination

NIST SP 800-53 Rev 5 Moderate

Security impact analysis

POA&M management

Plan of Action & Milestones

SSP control implementation

Technical writing

Microsoft Excel

Microsoft Word

Excellent communication

Tools

UiPath

Microsoft Excel

Microsoft Word

Job description

NewGen Technologies is seeking a Security Compliance SME to drive the Authority to Connect and Authority to Operate for a DISA Impact Level 5 enclave. You will manage eMASS entries, the eMASS profile, and the ACAS platform, and run daily vulnerability scans.

You will contribute to the development of the System Security Plan, System Assessment Plan, and Contingency and Incident Response artifacts, ensuring rigorous documentation and compliance across programs.