Cybersecurity Assessment & Authorization (A&A) Subject Matter Expert (SME) - Active Secret Clearance

Serves as a Cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. Possesses an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. Determines the applicable severity value for an identified vulnerability (e.g.,

non-compliant security control) and determines the possible ramifications on the system’s current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

RESPONSIBILITIES

• Serve as theprimary A&A cybersecurity SME, guiding assessment and authorization of Legacy AMPS systems.
• PerformRisk Management Framework (RMF) assessments in accordance with NIST 800-53/800-37 guidelines.
• Assess, evaluate, and document security controls for complex enterprise IT systems, including provisioning, SSO, and PAM environments.
• ConductAuthorization Reviews for existing and new systems; determine impact of vulnerabilities and provide mitigation recommendations.
• Coordinate with government stakeholders and PMO to ensure compliance with all applicable DoD cybersecurity policies, procedures, and regulations.
• Prepare and deliver technical reports, briefing materials, and evidence for audit and security compliance reviews.
• Monitor and maintain security posture of systems in development, test, and production environments, including Cloud and on-premises infrastructure.
• Leverage AI/ML tools as appropriate to automate assessment tasks and identify potential security gaps.
• Provide guidance on emerging cybersecurity technologies, cloud security, and identity governance within the DLA environment.

REQUIRED SKILLS & QUALIFICATIONS

• Must hold Active Secret Clearance

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum5+ years of relevant experience in RMF and NIST A&A assessments.

• Strong knowledge ofDoD/Federal cybersecurity policies and regulations.
  • Experience withIdentity & Access Management (IAM) systems, Oracle Identity Manager, and SSO solutions.
  • Familiarity withPrivileged Access Management (PAM) tools (e.g., CyberArk).
  • Hands-on experience assessingcloud (OCI, FedRAMP IL5) and on-prem systems.
  • Knowledge ofvulnerability assessment, patch management, and security compliance auditing.

• Excellent communication, documentation, and presentation skills; ability to liaise with government personnel and PMO staff.
• Certifications:DoD-approved 8570 Baseline Certification (IAM Level I); additionalCloud/Security Certifications preferred (e.g., CCSP, CCSK).

If you are interested in getting more information about this opportunity, please contact Irina Rozenberg

 Recruiting@arielpartners.com at your earliest convenience.

At Ariel Partners, we solve the most difficult problems that inhibit technology from enabling our customers to achieve their goals. Our vision is to be recognized by our stakeholders as an elite provider of IT solutions, so when they have their biggest challenges, we are on their short list. We are looking for team members who share our values of: Integrity to do the right thing even when it hurts; Commitment to the long-term success and happiness of our customers, our people, and our partners; Courage to take on difficult challenges, accept new ideas, and accept incremental failure; and the constant pursuit of Excellence. Ariel Partners is an Equal Opportunity Employer in accordance with federal, state, and local laws.