Cybersecurity Assessment & Authorization – Subject Matter Expert; SME; DLA Cybersecurity A&A
Washington, District of Columbia, 20022, USA
Listed on 2026-10-02
-
IT/Tech
Cybersecurity, Information Security & Data Protection
All Jobs >
Cybersecurity Assessment & Authorization – Subject Matter Expert (SME) - DLA Cybersecurity A&A
Cybersecurity Assessment & Authorization – Subject Matter Expert (SME) - DLA Cybersecurity A&A
Fully Remote Business Development
DescriptionCybersecurity Assessment & Authorization – Subject Matter Expert (SME)
At B&A, we foster and embrace a distinct set of values that we live by and instill in all aspects of our organization: dedication, commitment, partnership, trust, and recognition. We have incorporated these values into successful delivery for our customers since 1988. B&A believes in ensuring its employees feel deeply connected to B&A, recognizing successes and hard work, and providing continuous opportunities to learn and grow.
Our people are entrepreneurial thinkers that combine mindset, vision, and experience to drive value – not only to us as an organization, but to the clients we support. We promote a collaborative culture with our clients, and with each other, as one team working towards a common vision. We’d love for you to join our team!
B&A is seeking a Cybersecurity Assessment & Authorization – Subject Matter Expert (SME) to support the Defense Logistics Agency (DLA) Cybersecurity Assessment and Authorization Support Services (A&A). This is a full-time, off-site/remote position. If you are interested and meet the qualifications below, we encourage you to apply for this exciting and impactful opportunity.
- Anticipated Award: September/October 2026
- Anticipated Start: October 2026
- Period of Performance: 1 Base Year + 2 Option Years
Note:
Personnel shall be available to periodically support meetings and/or SIPRNET tasks at DLA locations as required.
- Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.
- Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process.
- Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes.
- Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization.
- Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.
- At least five (5) years of Certification and Accreditation (C&A) experience.
- Advanced knowledge of the Risk Management Framework (RMF) and NIST Certification & Accreditation (C&A) process.
- Experience with DoD or Federal Government cybersecurity programs.
- Experience assessing security controls and conducting authorization reviews for large, complex information systems.
- Current DoD 8570/8140 approved IAM Level III certification.
- Active Secret, adjudicated within the last five (5) years
Work Environment Requirements
Employees must be able to perform the essential functions of this position, with or without accommodation.
- Ability to remain stationary for extended periods while working at a computer.
- Frequently operate standard office equipment, including computers and telephones.
- Ability to communicate effectively in person, by telephone, video conference, and email.
- Occasionally move about the…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).