Cybersecurity Analyst RMF​/A&A; Cleared

Overview

Join the team that authorizes the DoD's commercial cloud. You will assess Cloud Service Provider offerings against the DoD Cloud Computing SRG at Impact Levels 4, 5, and 6, supporting DISA's assessment and authorization (A&A) mission under the Risk Management Framework. Five openings — a rare chance to join a full cyber team at stand-up.

Arlington, VA (Crystal City);
Fort Meade, MD;
Chambersburg, PA (Letterkenny Army Depot);
Ogden, UT (Hill AFB); or Oklahoma City, OK (Tinker AFB). On-site at a Government facility; limited local telework of unclassified work with Government approval

• Evaluate CSP deliverables and Provisional Authorization documentation for compliance with DoD CSP SRG IL4/IL5/IL6.
• Analyze A&A packages against contract security requirements and draft compliance assessment methodologies.
• Coordinate verification of CSP requirements in Government tracking tools (eMASS, ACAS, CMRS, and related systems).
• Facilitate authorization process syncs, user community round tables, and CSP engagement on compliance status.
• Research cloud security trends, validate system configurations and logs, and support CSSP and network defense troubleshooting.

• Bachelor's degree + 4 years of experience, OR 8 years total in cybersecurity assessment and authorization (RMF, NIST SP 800-53, DoD compliance).
• Active TS/SCI clearance.
• Meets DoD 8140 requirements for Work Role 612, Security Control Assessor (Intermediate); alternate Work Role 722, ISSM.

• Hands‑on eMASS package development and workflow management experience.
• Experience assessing CSPs or cloud systems under the DoD Cloud Computing SRG or FedRAMP.
• Working knowledge of STIGs, ACAS/Nessus scanning, and POA&M management.

DoD 8140 WRC 612 (Intermediate) examples: ISC2 CGRC (formerly CAP), ISACA CISA, CompTIA SecurityX (formerly CASP+), CISSP.

Blue Sky Innovative Solutions (Blue Sky) assists its federal, state and local, and commercial clients with solving their toughest challenges in the areas of IT Infrastructure Support and Engineering;
Application Development and Maintenance;
Program and Project Management; and Management Consulting. Find out more about Blue Sky at  Blue Sky is an equal opportunity employer and recruits mission-oriented, proactive, skilled candidates from across the United States. As an SBA certified HUBZone small business, Blue Sky has a special interest in recruiting and hiring personnel who reside in HUBZones. To determine whether you reside in a HUBZone, visit (Use the "Apply for this Job" box below).

. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.