We are looking for a Cloud Computing Specialist (CCS) to join our team in support of a DoD customer in Alexandria, VA. The CCS will serve as an Information Assurance and Cloud Computing SME with regards to Certification and Accreditation (C&A) and a broad coverage of the application of the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) standards and guidance as outlined in the NIST Special Publication(s) (SP) 800-53 and 800-37 (current versions).
Responsibilities Include:
- Provide full lifecycle Information Assurance (IA) support for systems maintaining current Authority to Operate (ATO) under RMF via eMASS.
- Update, maintain, and validate RMF artifacts, IA documentation, scorecards, and accreditation packages.
- Develop, manage, and execute POA&M, MOUs/MOAs, risk acceptance documentation, and other compliance artifacts.
- Ensure continuous compliance with DoD/DLA RMF requirements supporting ATO and Authority to Connect (ATC).
- Support RMF Assessment & Authorization (A&A) processes and validate eMASS inputs.
- Conduct annual risk assessments and IA control validations.
- Review engineering projects and change requests to ensure implementation of required IA controls and policies.
- Support connection approval processes and manage required documentation.
- Identify security risks and enhancements; develop and track mitigation strategies.
- Evaluate and recommend security components and configurations (e.g., firewalls, IDS/IPS).
- Provide IA input to Technical Review Boards (TRB) and Change Control Boards (CCB).
- Support DLA CERT, network engineering, and NTS teams on IA compliance and security event response.
- Maintain situational awareness of USCYBERCOM alerts/advisories and assess operational impact.
- Analyze proposed IT acquisitions for IA, interoperability, architecture, and standards compliance; identify required security configuration guidance.
- Support DISN sub-network accreditation to achieve/maintain full ATO and ATC.
- Plan and execute IA requirements for technology migrations affecting accredited systems.
- Implement and maintain information protection guidance for controlled unclassified and classified information in accordance with DoD/DLA policy.
Required Skills, Qualifications and Experience:
- Minimum Requirement:
- Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience
- DOD IA experience.
- Certification Requirements:
- Cloud Computing Security Certification
- Certification meeting DOD 8570.01 IAM III (CISSP, CISM, etc.)
- Skills and Experience:
- Experience in assessing IA Controls and conducting C&A reviews for large, complex Information systems.
- Ability to work independently with substantial cloud computing security knowledge.
- Must have the essential skillsets to identify, manage and resolve cloud computing security risk and implement "best practices" as applied within a cloud environment (across all of the different deployment and service models, and derivatives).
- Must be well versed in FedRAMP assessment methodology of security and privacy controls deployed in cloud information systems to include six (6) domain areas. The six domains include: Architectural Concepts & Design Requirements, Cloud Data Security, Cloud Platform & Infrastructure Security, Cloud Application Security, Operations, Legal & Compliance.
- Clearance Requirement:
- This position requires a SECRET with a Tier 3 investigation.
Compensation: $100,000+