A&A Specialist
Core
Lead cybersecurity compliance for Federal/DoD systems as an Information System Security Officer (ISSO) and Assessment & Authorization (A&A) specialist, managing the Risk Management Framework (RMF) lifecycle to achieve and maintain Authority to Operate (ATO).
Role type
Senior IC Information System Security Officer (ISSO) / A&A Specialist
Builds
Security authorization documentation (SSPs, POA&Ms) and maintains authorized security posture for federal systems
Domain
US Federal Government / Defense / National Security / Cybersecurity Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
RMF lifecycle management (NIST SP 800-37), NIST SP 800-53 controls implementation and assessment, vulnerability scanning, risk analysis, security documentation management (SSPs, POA&Ms), FISMA compliance
Preferred skills
Cloud security (FedRAMP), high-impact or classified systems experience, GRC platforms, continuous monitoring automation
Technologies
NIST SP 800-37, NIST SP 800-53, FISMA, FedRAMP, GRC platforms
Responsibilities
Manage the full RMF lifecycle (Categorize, Select, Implement, Assess, Authorize, Monitor) for assigned systems; Implement and assess NIST SP 800-53 security controls; Develop and maintain required security authorization documentation; Conduct continuous security monitoring and periodic reviews
Seniority
Mid-level, hands-on IC