> Markdown version of [/jobs/ext/2185879-cybersecurity-analyst-rmf-a-a-cleared](https://www.wearedevelopers.com/jobs/ext/2185879-cybersecurity-analyst-rmf-a-a-cleared). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Analyst - RMF / A&A (Cleared)

- **Company:** Blue Sky Innovative Solutions
- **Location:** Fort Meade, MD, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cloud Computing Security, Cyber Security, System Configuration, Network Security, Package Development Process, Cloud Services, Cloud Platform System, Nessus, Plan of Action and Milestones
- **Published:** August 22, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9096052/cybersecurity-analyst-rmf-aa-cleared

## About the Role

* Bachelor's degree + 4 years of experience, OR 8 years total in cybersecurity assessment and authorization (RMF, NIST SP 800-53, DoD compliance).
 * Active TS/SCI clearance.
 * Meets DoD 8140 requirements for Work Role 612, Security Control Assessor (Intermediate); alternate Work Role 722, ISSM.

What Sets You Apart

 * Hands-on eMASS package development and workflow management experience.
 * Experience assessing CSPs or cloud systems under the DoD Cloud Computing SRG or FedRAMP.
 * Working knowledge of STIGs, ACAS/Nessus scanning, and POA&M management.

## Description

Join the team that authorizes the DoD's commercial cloud. You will assess Cloud Service Provider offerings against the DoD Cloud Computing SRG at Impact Levels 4, 5, and 6, supporting DISA's assessment and authorization (A&A) mission under the Risk Management Framework. Five openings - a rare chance to join a full cyber team at stand-up.

Locations
Arlington, VA (Crystal City); Fort Meade, MD; Chambersburg, PA (Letterkenny Army Depot); Ogden, UT (Hill AFB); or Oklahoma City, OK (Tinker AFB). On-site at a Government facility; limited local telework of unclassified work with Government approval

How You'll Make an Impact

 * Evaluate CSP deliverables and Provisional Authorization documentation for compliance with DoD CSP SRG IL4/IL5/IL6.
 * Analyze A&A packages against contract security requirements and draft compliance assessment methodologies.
 * Coordinate verification of CSP requirements in Government tracking tools (eMASS, ACAS, CMRS, and related systems).
 * Facilitate authorization process syncs, user community round tables, and CSP engagement on compliance status.
 * Research cloud security trends, validate system configurations and logs, and support CSSP and network defense troubleshooting.


## Related Videos

- [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)