Cybersecurity Assessment & Authorization (A&A) Subject Matter Expert – Active Secret Clearance

Ariel Partners

Cybersecurity Subject Matter Expert guiding Assessment and Authorization for IT consulting. Focused on DOD cybersecurity policies and procedures with emphasis on NIST standards.

Posted 7/5/2026full-timeStafford • Virginia • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityOracle

About the role

Key responsibilities & impact

Serves as a Cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.
Performs a DoD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization.
Possesses an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s.
Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization.
Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.
Perform Risk Management Framework (RMF) assessments in accordance with NIST 800-53/800-37 guidelines.
Assess, evaluate, and document security controls for complex enterprise IT systems, including provisioning, SSO, and PAM environments.
Conduct Authorization Reviews for existing and new systems; determine impact of vulnerabilities and provide mitigation recommendations.
Coordinate with government stakeholders and PMO to ensure compliance with all applicable DoD cybersecurity policies, procedures, and regulations.
Prepare and deliver technical reports, briefing materials, and evidence for audit and security compliance reviews.
Monitor and maintain security posture of systems in development, test, and production environments, including Cloud and on-premises infrastructure.
Leverage AI/ML tools as appropriate to automate assessment tasks and identify potential security gaps.
Provide guidance on emerging cybersecurity technologies, cloud security, and identity governance within the DLA environment.

Requirements

What you’ll need

Must hold Active Secret Clearance
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
Minimum 5+ years of relevant experience in RMF and NIST A&A assessments.
Strong knowledge of DoD/Federal cybersecurity policies and regulations.
Experience with Identity & Access Management (IAM) systems, Oracle Identity Manager, and SSO solutions.
Familiarity with Privileged Access Management (PAM) tools (e.g., CyberArk).
Hands-on experience assessing cloud (OCI, FedRAMP IL5) and on-prem systems
Knowledge of vulnerability assessment, patch management, and security compliance auditing.
Excellent communication, documentation, and presentation skills; ability to liaise with government personnel and PMO staff.
Certifications: DoD-approved 8570 Baseline Certification (IAM Level I); additional Cloud/Security Certifications preferred (e.g., CCSP, CCSK).

Benefits

Comp & perks

N/A 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Assessment and Authorization (A&A)Vulnerability AssessmentSecurity Compliance AuditingCloud SecurityPrivileged Access Management (PAM)Security Control EvaluationTechnical Report PreparationSecurity Posture MonitoringAI/ML Tools UtilizationDocumentation of Security Controls

Soft Skills

Excellent CommunicationPresentation SkillsLiaison with Government Personnel

Certifications

Active Secret ClearanceDoD-approved 8570 Baseline Certification (IAM Level I)Cloud/Security Certifications (e.g., CCSP, CCSK)