Authorization and Accreditation Lead

AeroVironment•Lincoln Park, VA

3d•$140,000 - $170,000

About The Position

The primary role of the Authorization and Accreditation Lead is t o serve as the crucial bridge between technical teams, program leadership, and security policy, driving compliance and continuous monitoring for mission-critical systems. In this role, the successful candidate will perform authorization and accreditation duties for the program to include completing all processes and procedures as required for system compliance and security verification and controls.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or Computer Engineering.
Demonstrated five (5) years experience of direct combined experience in IT systems administration, cybersecurity compliance, IT system troubleshooting, and incident response.
Demonstrated six (6) years experience in a role such as Information Systems Security Engineer (ISSE), accrediting Sponsor programs of similar scope and complexity.
Experience with completing new system(s) authorization and accreditation through the Sponsor’s Authorization and Accreditation (A&A) processes, procedures, security requirements, and systems.
Experience in security policy, counterintelligence, and security controls.
An active TS/SCI with polygraph

Nice To Haves

Certification on AWS or equivalent cloud technology.
Certification in Security +.
Certified Information System Security Professional (CISSP).
Certified Information Security Manager (CISM), or equivalent.

Responsibilities

Lead all phases of the RMF (Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor) for information systems.
Developing, reviewing, and maintaining essential security artifacts (e.g., System Security Plans, POA&Ms, Risk Assessments).
Collaborate with engineers, developers, system owners, and leadership.
Ensuring adherence to federal mandates (NIST 800-53, 800-171, ICD 503, FISMA) and Sponsor specific policies.
Conduct assessments, tracking vulnerabilities, and managing remediation efforts.
Brief leadership and AOs on system security posture and authorization status, leading to a final "Authorization to Operate" (ATO) decision.