Cybersecurity & Accreditation Specialist

Command Post Technologies, Inc.•Suffolk, VA

7h•Hybrid

About The Position

Command Post Technologies, Inc. is seeking a Cybersecurity & Accreditation Specialist to eliminate accreditation bottlenecks for the Joint Staff J7 JTSD. The role is located in Suffolk, Virginia, with hybrid flexibility. The specialist owns the Assessment and Authorization (A&A) lifecycle and maintains audit-ready packages in eMASS to achieve and maintain Authorizations to Operate (ATOs) for JWCC Azure environments. The role manages Risk Management Framework (RMF) package execution in eMASS for systems migrating to Azure Government IL5/IL6; develops and maintains security authorization documentation; assesses security controls and applicable technical baselines; and works with government and security assessment stakeholders to present and defend security packages. The specialist also translates DoD Zero Trust requirements into verifiable controls within the RMF boundary.

Requirements

U.S. citizenship.
Active Secret clearance.
Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
At least 7 years of dedicated DoD cybersecurity and accreditation experience.
Extensive hands-on experience authoring and managing eMASS packages through successful ATO awards.
Deep working knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, and DoD Instruction 8510.01 (RMF).
Current DoD 8570/8140 IAM Level II certification, such as CISSP, CISM, or CAP/CGRC.
Strong problem-solving skills and ability to troubleshoot complex issues.
Effective communication and collaboration skills.

Nice To Haves

Active Top Secret clearance with SCI eligibility.
Direct experience developing RMF authorization packages for systems hosted in Azure Government (IL5) or Azure Secret (IL6), leveraging FedRAMP High and DISA Provisional Authorizations (PAs).
Familiarity with DevSecOps accreditation pathways, automated compliance evidence generation, and DoD Continuous ATO concepts.
Demonstrated experience translating DoD Zero Trust Reference Architecture requirements into eMASS control implementation statements.
Prior experience supporting Joint Staff, Combatant Command, or Army/Navy cyber accreditation workflows.
Strong technical documentation, briefing, and reporting experience.

Responsibilities

Manage end-to-end RMF package execution (Steps 1–6) in eMASS for systems migrating to Azure Government (IL5/IL6).
Author System Security Plans (SSPs), Continuous Monitoring Plans, Security Assessment Reports, and Plans of Action and Milestones (POA&Ms).
Assess and validate NIST SP 800-53 Rev. 5 security controls, DISA Cloud Computing SRG requirements, and applicable STIG baselines.
Liaise with Primary Government Project Leads, Division ISSMs, and Security Control Assessor (SCA) representatives to defend security packages.
Translate DoD Zero Trust mandate requirements into verifiable security controls within the RMF boundary.
Maintain audit-ready eMASS packages to achieve and maintain ATOs for JWCC Azure environments.