Zachary Piper Solutions is seeking an Accreditation & Authorization Lead to join a Federal Program located in Newington, VA. The Accreditation & Authorization Lead will play a critical role in ensuring systems maintain compliance with Department of Defense (DoD) and federal cybersecurity requirements while enabling mission success through effective risk management practices. Responsibilities of the

A&A Lead:

Lead and support RMF activities throughout the system lifecycle, from system categorization through authorization and continuous monitoring. Develop, maintain, and update cybersecurity documentation including: System Security Plans (SSPs) Security Assessment Reports (SARs) Plans of Action and Milestones (POA&Ms) Security Control Traceability Matrices (SCTMs) Risk Assessment Reports Assess and validate compliance with

NIST 800-53

security controls and applicable federal cybersecurity standards. Coordinate and support Authorization to Operate (ATO), Authority to Connect (ATC), and periodic reauthorization activities. Conduct security reviews, vulnerability assessments, and risk analyses to identify threats and mitigation strategies. Track remediation efforts and ensure cybersecurity findings are resolved in accordance with organizational timelines. Support continuous monitoring initiatives, vulnerability management, and cybersecurity audits. Collaborate with system owners, ISSOs, ISSMs, engineers, and government customers to ensure cybersecurity requirements are incorporated into system design and operations. Utilize tools such as eMASS, ACAS/Nessus, SCAP, and other cybersecurity platforms to maintain compliance and monitor security posture. Qualifications of the

A&A Lead:

3+ years of experience supporting RMF, cybersecurity compliance, or information assurance programs within a federal or DoD environment. Active TS/SCI Security Clearance Hands-on experience with the

NIST RMF

process and ATO lifecycle.

Knowledge of:

NIST 800-53 NIST 800-37

DoD

RMF STIG

implementation and compliance Vulnerability management processes Experience developing and maintaining RMF package documentation. Familiarity with eMASS and vulnerability scanning tools such as ACAS/Nessus. Strong understanding of cybersecurity principles, risk management, and security control implementation. Active DoD 8570/8140 compliant certification such as Security+, CISSP, CAP, CASP+, or equivalent. Compensation for the

A&A Lead:

Salary Range:

$140,000+

•flexible based on experience

•

Comprehensive Benefits:

Medical, Dental, Vision, PTO, and Sick Leave as required by law Flexible working schedule Unlimited opportunities for growth #LI-CJ2 #

LI-ONSITE

Key Words:

rmf, security, cybersecurity, dod, cleared, federal, clearance, army, vulnverability, emass, risk management, nist, framework, stig, compliance, security plus, implementation, nessus, scap, nessus, issos, issms, sctms, poa, sar, ssp