> Markdown version of [/jobs/ext/3934767-it-certified-professional-sr-level](https://www.wearedevelopers.com/jobs/ext/3934767-it-certified-professional-sr-level). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Certified Professional - Sr. Level

- **Company:** A2 Federal Inc.
- **Location:** Aberdeen, MD, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Security Content Automation Protocol, Data Streaming, Nessus, Scap Compliance Checker, Vulnerability Analysis
- **Published:** October 26, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9262223/it-certified-professional-sr-level

## About the Role

* SecurityX (formerly CASP+) or equivalent certification - Government confirmed CISSP, SecurityX , and CySA + are acceptable.
 * Minimum 5 years of experience supporting RMF lifecycle reporting.
 * Experience with software/hardware reconciliation (asset, software, and baseline inventory).

## Description

Performs day-to-day RMF lifecycle documentation, reporting, and hardware/software reconciliation for ATC systems under the direction of the IT Sys Solutions Architect-Sr. Maintains authorization artifacts, asset and software baselines, and compliance evidence to keep systems authorized and continuously monitored., * Prepare and maintain RMF artifacts - SSPs, control implementation statements, POA&Ms, continuous monitoring reports - and keep eMASS records current.

 * Perform hardware and software reconciliation: maintain authoritative asset inventories, approved software lists, and configuration baselines; reconcile against scan and discovery results and the authorization boundary.
 * Run and analyze STIG/SCAP and vulnerability scan results; document findings, track remediation, and update POA&Ms.
 * Support security control assessments and audits by assembling evidence and responding to assessor data calls.
 * Contribute to enterprise security architecture documentation (boundary diagrams, data flows, ports/protocols/services) consistent with DCWF 651 tasks.
 * Support IAVA/IAVM compliance reporting and periodic FISMA/Army cybersecurity data calls.

KNOWLEDGE, SKILLS, AND TOOLS

 * DoD RMF process and documentation; NIST SP 800-53/53A; DISA STIGs.
 * eMASS , STIG Viewer, SCAP Compliance Checker, ACAS/Nessus; asset/inventory tooling.
 * Clear technical writing for authorization packages.