TS/SCI A&A Lead: RMF & DoD Cyber Compliance

Zachary Piper Solutions; Newington, Northern (VA, KY); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

PTO

Sick leave

Flexible schedule

Growth opportunities

Job summary

Zachary Piper Solutions seeks an Accreditation & Authorization Lead to join a Federal Program in Newington, VA. You will drive RMF activities, maintain security documentation, and ensure compliance with DoD and federal cybersecurity requirements while enabling mission success.

You will coordinate ATO/ATC activities, perform vulnerability assessments, and collaborate with system owners, ISSOs, and government customers. Active TS/SCI and DoD RMF experience are required.

Qualifications

• 3+ years of experience supporting RMF, cybersecurity compliance, or information assurance programs within a federal or DoD environment.
• Active TS/SCI Security Clearance
• Hands-on experience with the NIST RMF process and ATO lifecycle.
• Knowledge of NIST 800-53, NIST 800-37, DoD RMF, STIG implementation and compliance, Vulnerability management processes
• Experience developing and maintaining RMF package documentation.
• Familiarity with eMASS and vulnerability scanning tools such as ACAS/Nessus.
• Strong understanding of cybersecurity principles, risk management, and security control implementation.
• Active DoD 8570/8140 compliant certification such as Security+, CISSP, CAP, CASP+, or equivalent.

Responsibilities

• Lead and support RMF activities throughout the system lifecycle, from system categorization through authorization and continuous monitoring.
• Develop, maintain, and update cybersecurity documentation including SSPs, SARs, POA&Ms, SCTMs, and Risk Assessment Reports.
• Assess and validate compliance with NIST 800-53 security controls and applicable federal cybersecurity standards.
• Coordinate and support Authorization to Operate (ATO), Authority to Connect (ATC), and periodic reauthorization activities.
• Conduct security reviews, vulnerability assessments, and risk analyses to identify threats and mitigation strategies.
• Track remediation efforts and ensure cybersecurity findings are resolved in accordance with timelines.
• Support continuous monitoring initiatives, vulnerability management, and cybersecurity audits.
• Collaborate with system owners, ISSOs, ISSMs, engineers, and government customers to ensure cybersecurity requirements are incorporated into system design and operations.
• Utilize tools such as eMASS, ACAS/Nessus, SCAP, and other cybersecurity platforms to maintain compliance and monitor security posture.

Skills

RMF experience

Cybersecurity risk management

Vulnerability management

Stakeholder communication

Tools

eMASS

ACAS/Nessus

SCAP

Job description

Zachary Piper Solutions seeks an Accreditation & Authorization Lead to join a Federal Program in Newington, VA. You will drive RMF activities, maintain security documentation, and ensure compliance with DoD and federal cybersecurity requirements while enabling mission success.

You will coordinate ATO/ATC activities, perform vulnerability assessments, and collaborate with system owners, ISSOs, and government customers. Active TS/SCI and DoD RMF experience are required.