Cybersecurity Assessment & Authorization (A&A) SME

Fort Belvoir, VA - USA

Monthly Salary: Not Disclosed

Posted on: 30+ days ago

Vacancies: 1 Vacancy

Job Summary

Title: Cybersecurity Assessment & Authorization (A&A) SME
Security Clearance: IT-II Non-Critical Sensitive or Tier 3 (T3) Secret
Location: Remote or DLA HQ Fort Belvoir VA
Certifications: Certified Cloud Security Professional (CCSP) and DoD 8570/8140 Category IAT Level II (i.e. Sec CE) and at least one industry-recognized Cloud certification.

Overview:
Nationwide IT Services (NIS) is seeking a highly skilled Cybersecurity Subject Matter Expert (SME) for a potential opportunity leading Assessment and Authorization (A&A) efforts for complex information systems. The SME will guide the application of cybersecurity policies NIST 800-53 controls and the Risk Management Framework (RMF) to support system authorization audit readiness and ongoing compliance across large-scale IT environments.

Key Responsibilities:

Serve as a DOD cybersecurity SME for information systems undergoing A&A.
Apply NIST 800-53 security controls to assess and authorize large multi-enclave IT infrastructures including AIS applications and IT processes.
Evaluate vulnerabilities determine severity and assess potential impacts on system authorizations.
Support audit readiness and sustainment by participating in audits and producing compliance documentation.
Maintain RMF ATO and audit documentation in a central repository ensuring all artifacts modifications and dates are properly recorded.

Required Qualifications:

Minimum 5 years of hands-on experience with RMF and NIST A&A including Zero Trust SCCA FRD and SRG frameworks.
Certified Cloud Security Professional (CCSP).
Active IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) at proposal submission.
DoD 8570/8140 Category IAT Level II certification at time of submission.
Strong business and technical writing skills.
At least one industry-recognized Cloud certification.

Experience & Expertise:

Comprehensive understanding of DoD cybersecurity authorization processes policies and procedures.
Knowledge of emerging technology cybersecurity including Cloud Industrial Control Systems (ICS) warehouse execution systems and Operational Technology (OT) infrastructures.
Proven experience in assessing information assurance controls and conducting A&A reviews for large complex organizations.
Experience supporting DoD audit readiness initiatives.
Strong analytical and problem-solving skills for resolving complex security issues.

About Nationwide IT Services (NIS):
NIS is a CVE-verified Service-Disabled Veteran-Owned Small Business delivering IT and management consulting solutions. We leverage technology people and industry best practices to provide innovative value-added services to our customers.
Benefits:

Medical dental and vision insurance
Life and disability insurance
401(k) with employer match
Paid holidays PTO (sick/vacation)
Commuter benefits
Employee Assistance Program (EAP)
Educational reimbursement
Pet insurance

Equal Opportunity Employer:
Nationwide IT Services Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion sex national origin sexual orientation gender identity genetics disability or protected veteran status.

Required Experience:

Manager

Title: Cybersecurity Assessment & Authorization (A&A) SMESecurity Clearance: IT-II Non-Critical Sensitive or Tier 3 (T3) SecretLocation: Remote or DLA HQ Fort Belvoir VACertifications: Certified Cloud Security Professional (CCSP) and DoD 8570/8140 Category IAT Level II (i.e. Sec CE) and at least one...

Serve as a DOD cybersecurity SME for information systems undergoing A&A.
Apply NIST 800-53 security controls to assess and authorize large multi-enclave IT infrastructures including AIS applications and IT processes.
Evaluate vulnerabilities determine severity and assess potential impacts on system authorizations.
Support audit readiness and sustainment by participating in audits and producing compliance documentation.
Maintain RMF ATO and audit documentation in a central repository ensuring all artifacts modifications and dates are properly recorded.

Required Qualifications:

Minimum 5 years of hands-on experience with RMF and NIST A&A including Zero Trust SCCA FRD and SRG frameworks.
Certified Cloud Security Professional (CCSP).
Active IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) at proposal submission.
DoD 8570/8140 Category IAT Level II certification at time of submission.
Strong business and technical writing skills.
At least one industry-recognized Cloud certification.

Experience & Expertise:

Comprehensive understanding of DoD cybersecurity authorization processes policies and procedures.
Knowledge of emerging technology cybersecurity including Cloud Industrial Control Systems (ICS) warehouse execution systems and Operational Technology (OT) infrastructures.
Proven experience in assessing information assurance controls and conducting A&A reviews for large complex organizations.
Experience supporting DoD audit readiness initiatives.
Strong analytical and problem-solving skills for resolving complex security issues.