Security Compliance SME

Overview

Acuity is an award-winning consulting firm that provides proven management and technological services to the Federal government. Recognized as one of the Best Places to Work, by the Washington Business Journal for over five years in a row, we are hiring additional Security Compliance SMEs to further assist and join in our growth.

Looking to make a difference, to help keep people safe, or even to save lives through your work with technology? Join Acuity’s team of experts to have an impact on our government’s critical missions. Acuity, Inc. is a consulting firm that supports federal agencies in the areas of IT Modernization, Data Enablement, and Hyperautomation.

• Provide expert-level advisory for the implementation of the NIST Risk Management Framework (RMF).
• Lead the development and maintenance of comprehensive System Security Plans (SSP) and security control traceabilities.
• Technical implementation and management of security assessment artifacts within the eMASS (Enterprise Mission Assurance Support Service) system.
• Conduct internal technical security assessments to ensure readiness for formal third‑party assessment (3
  
  PAO) audits.
• Analyze technical system configurations to ensure adherence to NIST 800-53 Moderate/High controls and DISA STIGs.
• Serve as the primary technical advisor during the federal Authority to Operate (ATO) lifecycle for agency systems.
• Manage the technical implementation of Plans of Action and Milestones (POA&M) for remediating security gaps.

• Bachelor’s degree in a technical field.
• 12+ years of experience in cybersecurity and federal compliance.
• 7+ years of deep expertise in the NIST RMF and the eMASS system.
• Recognized authority in federal IT compliance and security authorization.

• Federal & Security: CISSP (required) and Certified Authorization Professional (CAP) or CISA.
• Domain-Specific: AWS/Azure Security certifications.
• Architecture/Management: CISM or GSLC.

• Compliance Systems: eMASS, Xacta, Service Now GRC.
• Technical Assessment Tools:
  Tenable/ACAS, STIG Viewer, SCAP Compliance Checker.
• Documentation: SSP, SAR, RAR, POA&M development.
• Standards: NIST 800-53, 800-37, 800-171, FIPS 199.

• Demonstrated expertise in applying FedRAMP Moderate/High baselines and DoD RMF requirements.
• Technical implementation of FISMA High compliance for enterprise federal systems.
• Experience with Continuous Diagnostics and Mitigation (CDM) and continuous monitoring programs.

• Active security clearance (Secret or Top Secret) or eligibility to obtain one.

We offer competitive compensation, comprehensive benefits, and a strong focus on work‑life balance so you can perform at your best—at work and at home.

Acuity is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.