Cybersecurity & Accreditation Specialist

Torch Technologies, Inc.•Huntsville, AL

4d•$140,000 - $165,000•Hybrid

About The Position

Torch Technologies is seeking a Cybersecurity & Accreditation Specialist to eliminate accreditation bottlenecks for the Joint Staff J7 JTSD. This role can be located in Suffolk, VA or Huntsville, AL with hybrid flexibility. You will own the Assessment & Authorization (A&A) lifecycle, maintaining audit-ready packages in eMASS to achieve and maintain Authorizations to Operate (ATOs) for all JWCC Azure environments.

Requirements

U.S. Citizenship
Active DoW Secret clearance.
Bachelor’s degree in Cybersecurity, Information Systems, or related field, plus 7+ years of dedicated DoD cybersecurity and accreditation experience.
Extensive, hands-on experience authoring and managing packages in the Enterprise Mission Assurance Support Service (eMASS) to successful ATO awards.
Deep working command of NIST SP 800-37, NIST SP 800-53 Rev 5, and DoD Instruction 8510.01 (RMF).
Current DoD 8570/8140 IAM Level II certification (e.g., CISSP, CISM, or CAP/CGRC).
Strong problem‑solving skills and ability to troubleshoot complex issues
Effective communication and collaboration skills

Nice To Haves

Active Top Secret clearance with SCI eligibility.
Direct experience developing RMF authorization packages for systems hosted in Azure Government (IL5) or Azure Secret (IL6), leveraging FedRAMP High and DISA Provisional Authorizations (PAs).
Familiarity with DevSecOps accreditation pathways, automated compliance evidence generation, and DoD Continuous ATO concepts.
Demonstrated experience translating DoD Zero Trust Reference Architecture requirements into eMASS control implementation statements.
Prior experience supporting Joint Staff, Combatant Command, or Army/Navy cyber accreditation workflows.
Strong technical documentation, briefing, and reporting experience

Responsibilities

Manage end-to-end RMF package execution (Steps 1–6) in eMASS for systems migrating to Azure Government (IL5/IL6).
Author System Security Plans (SSP), Continuous Monitoring Plans, Security Assessment Reports, and Plan of Action and Milestones (POA&M).
Assess and validate NIST SP 800-53 Rev 5 security controls, DISA Cloud Computing SRG requirements, and applicable STIG baselines.
Liaise directly with Primary Government Project Leads, Division ISSMs, and Security Control Assessor (SCA) representatives to defend security packages.
Translate DoD Zero Trust mandate requirements into verifiable security controls within the RMF boundary.