SCI SCA Assessment and Authorization Specialist

CACI International•Suitland, MD

About The Position

CACI is seeking a skilled and experienced SCI SCA Rep A&A Specialist (Level 3) to join our dynamic team to support a DoD client in Suitland, MD. The ideal candidate will have extensive experience in Assessment and Authorization (A&A) processes, particularly within the Department of Defense (DoD) and Intelligence Community (IC) environments. This role requires a deep understanding of information assurance, security testing, and evaluation, as well as expert-level experience with the Risk Management Framework (RMF) and various security tools and systems.

Requirements

TS/SCI Security Clearance
BA/BS in IT, Information Assurance, or a related field is desired.
Minimum of 10 years of A&A experience with ICD-503 and/or NIST Framework.
3 years of Project Management experience.
Extensive experience and education in information assurance, including accreditation, security testing, and evaluation.
Knowledge of DoD, IC, and national-level system security initiatives and secure Information/LAN/WAN technologies.
Must meet the requirements of the DOD Information Assurance Workforce Improvement Program, DOD 8570.01-M, by holding one of the following certifications: Certified Authorization Professional (CAP) General Information Assurance Certification (GIAC) Security Leadership Certification (GSLC) Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP) Certified Advanced Security Practitioner (CASP)

Responsibilities

Conduct comprehensive assessments of systems' implementation of controls as outlined in NIST 800-53A.
Utilize the Telos Xacta system or similar RMF automation tools to streamline the assessment process.
Review vulnerability scan results from ACAS (e.g., Nessus) and employ automated STIG technologies to evaluate system controls using Navy GOTS tools like Evaluate STIG, STIG Viewer, and eMASTER.
Author detailed System Assessment Reports (SAR) and effectively communicate the risk posture of systems to stakeholders.
Collaborate with project teams to ensure compliance with ICD-503, NIST Framework, and other relevant security standards.
Provide expert-level support for the "Assessment" phase (Step 4) of the RMF process as defined in NIST 800-37.
Offer multi-discipline expertise across all Information Technology areas including OS, Application, Network, Cross-domain, storage, multi-function devices, and platform IT.
Engage with DoD, DISA, NNWC, DoDIIS, and IC tools, systems, and reporting mechanisms to ensure alignment with security requirements.
Maintain effective oral and written communication skills to present findings and recommendations clearly and concisely.