NTCSS ACAS System Administrator & RMF Specialist

CACI•Norfolk, VA

5d•Onsite

About The Position

The NTCSS ACAS System Administrator & RMF Specialist will provide cybersecurity support for the Naval Tactical Command Support System (NTCSS). This role is responsible for vulnerability management, Risk Management Framework (RMF) implementation, and ensuring security compliance for DoD Business IT systems that support Navy aviation, afloat, and shore activities. The position involves administering the enterprise ACAS architecture, executing the complete vulnerability lifecycle, developing and maintaining RMF A&A package documentation, performing STIG testing, and managing POA&M entries.

Requirements

Active Secret clearance
Bachelor's degree in Computer Science, IT, Cybersecurity, or related field OR HS Diploma/GED with additional experience
5 years (with Bachelor's) OR 7 years (with HS/GED) in cybersecurity operations, vulnerability management, and RMF A&A processes
Hands-on experience with ACAS/Tenable and eMASS
Working knowledge of DoD RMF processes
CompTIA Security+ (IAT Level II) or equivalent certification
DoD 8570.01-M and DoD 8140 compliance
Valid CSWF credentials
ACAS architecture (SecurityCenter, Nessus)
Vulnerability management
DoD compliance (STIGs, IAVAs, NIST)
RMF documentation
eMASS workflows
Windows/Linux administration
Networking fundamentals
End-to-end vulnerability management

Nice To Haves

Advanced cybersecurity certifications
Experience with VRAM, PDQ, Trellix, Active Directory, VMware
Python scripting
DoD Business IT systems or Navy/DoD Echelon II/III commands support experience
SCAP, STIG Viewer, Agile/DevSecOps, Jira, Confluence proficiency
Senior leadership briefing and technical mentoring experience

Responsibilities

Administer enterprise ACAS architecture (Tenable SecurityCenter, Nessus scanners/Agents) across classified/unclassified networks
Execute complete vulnerability lifecycle: scanning, identification, remediation coordination, and validation
Develop and maintain RMF A&A package documentation in eMASS per DoD/Navy guidance
Perform STIG testing, security control assessments, and compliance validation using STIG Viewer/SCAP tools
Manage POA&M entries documenting security deficiencies, mitigation strategies, and remediation timelines
Apply security patches and configuration changes across Windows/Linux environments per DoD standards
Generate vulnerability reports supporting compliance requirements and risk management decisions
Ensure compliance with STIGs, IAVAs, NIST standards, and DISA cybersecurity directives
Coordinate with network, system administration, and cybersecurity teams for ACAS integration
Maintain technical documentation and compliance evidence for audits and authorizations