Sr System Security Info Assurance SME (Top Secret Required)

NANA Regional Corporation • Washington, MA

32d • $200,000 - $225,000 • Onsite

About The Position

ADM is looking for a Senior System Security Information Assurance (IA) Subject Matter Expert (SME) to work in Washington, DC. To join our team of outstanding professionals, apply today! The Sr System Security IA SME serves as the lead authority for all security-related aspects of the computing environment. This key position provides deep technical expertise, oversight, and strategic guidance to ensure the confidentiality, integrity, and availability of mission-critical DoD systems. The SME is responsible for implementing, maintaining, and validating security postures across complex and distributed network architectures. This role requires advanced knowledge of Defense-in-Depth strategies, DoD cybersecurity programs, accreditation processes, physical and personnel security concepts, and risk management methodologies. The SME will support all tasks outlined by the Program Manager, ensuring full compliance with DoD cybersecurity policies, continuous monitoring requirements, and established governance frameworks. The position requires a seasoned IA professional capable of conducting high-level security assessments, leading vulnerability management activities, and maintaining system accreditation artifacts within a demanding DoD environment. A Top Secret security clearance and extensive experience in DoD technology environments are mandatory.

Requirements

• Bachelor of Science in Computer Engineering, Computer Information Systems, Telecommunications, Management Information Systems, or a closely related discipline.OR
• 12 years of directly relevant documented experience.
• Top Secret Clearance required.
• DoD 8570 IAM Level III (mandatory).
• 5 years of experience in a DoD technology environment.
• 5 years of experience with DoD IAVM programs.
• 5 years of experience administering, configuring, and securing ACAS and HBSS architectures.
• 5 years of experience developing and implementing security policies, applying system/network updates, and securing access to sensitive data.
• 5 years of experience responding to Network Operations notifications and executing corrective actions.
• 5 years of hands-on experience with ACAS reporting, monitoring, and applying IAVA remediations.
• 5 years of experience managing system vulnerabilities and generating detailed security reports.
• 5 years of experience maintaining a System Security Authorization Agreement (SSAA) or similar accreditation package.
• 5 years of experience designing, maintaining, and documenting system processes and procedures.
• 5 years of experience supporting DIARMF/RMF accreditation and maintaining associated documentation.
• 5 years of experience performing configuration management, vulnerability assessments, and vulnerability management support.
• Documented experience supporting FISMA, DoD IG inspections, ACA, and other accreditation and compliance programs.
• 5 years of experience in physical and personnel security disciplines.
• 5 years of experience in Incident Response, cybersecurity auditing, and CNDSP-related work.
• Demonstrated ability to implement DoD 8570.01-M / DoD 8140 workforce requirements.

Responsibilities

• Serve as the lead technical authority for all IA and cybersecurity functions within the computing environment.
• Implement, maintain, and enhance security postures across complex DoD network and system architectures.
• Apply Defense-in-Depth principles to protect systems, data, applications, and network infrastructure.
• Manage the full Risk Management Framework (RMF) lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, maintain, and track Plan of Action and Milestones (POA&Ms) to ensure timely remediation of vulnerabilities, audit findings, and control deficiencies.
• Ensure all RMF artifacts, evidence, and documentation remain current and compliant with DoD requirements.
• Maintain and update System Security Authorization Agreements (SSAAs) and other accreditation packages.
• Conduct security control assessments and prepare comprehensive RMF security assessment reports.
• Manage, apply, and validate Security Technical Implementation Guides (STIGs) across servers, workstations, network devices, and applications.
• Complete, manage, and review STIG checklists, ensuring proper documentation of findings, mitigations, and compliance status.
• Monitor, analyze, and report on system vulnerabilities and risks using tools such as ACAS, HBSS, and other DoD-mandated solutions.
• Apply and track Information Assurance Vulnerability Alerts (IAVAs) within required deadlines.
• Respond to Network Operations Center (NOC) notifications and take appropriate security actions.
• Conduct ongoing configuration management, vulnerability assessments, and compliance validation.
• Support FISMA reporting requirements, DoD IG inspections, ACA audits, and broader accreditation/certification programs.
• Perform and document incident response activities, security audits, and CNDSP-related functions.
• Provide expert guidance on physical and personnel security measures relevant to the IA mission.
• Prepare detailed security reports, briefs, and recommendations for stakeholders and leadership.
• Ensure compliance with DoD 8570.01-M/DoD 8140 cybersecurity workforce requirements.

Benefits

• The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits.
• Paid Time Off (PTO) is offered to regular full-time and part-time employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Accommodation
• Number of Employees: 5,001-10,000 employees