Cybersecurity Certification & Accreditation (C&A) Analyst

The Cybersecurity Certification & Accreditation (C&A) Analyst will provide expert-level support to the Defense Logistics Agency (DLA) in executing Risk Management Framework (RMF) and Information Assurance (IA) activities across enterprise IT environments. This role leads certification and accreditation efforts, develops and maintains cybersecurity documentation, and ensures compliance with Department of Defense (DoD) cybersecurity policies, NIST standards, and DLA-specific requirements. The ideal candidate brings extensive experience supporting large, complex DoD environments and demonstrates the ability to coordinate vulnerability management, audit support, and cybersecurity assessments.

*This position is contingent upon contract award.*

Responsibilities

• Serve as a subject matter expert for Certification and Accreditation (C&A) and RMF processes across DLA enterprise systems.
• Support full lifecycle RMF activities, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain RMF documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and eMASS artifacts.
• Evaluate and validate security controls in accordance with NIST SP 800-53 and DoD Information Assurance requirements.
• Conduct vulnerability assessments, analyze scan results, and support remediation activities across enterprise environments.
• Provide support for Command Cyber Readiness Inspections (CCRIs), Cybersecurity Vulnerability Assessments (CVAs), Office of Inspector General (OIG) inspections, and audits.
• Assist in developing risk assessments and mitigation strategies for identified vulnerabilities.
• Support compliance tracking, reporting, and coordination of IAVA/IAVM activities.
• Provide technical guidance on IA controls, system security design, and compliance requirements.
• Collaborate with engineers, system administrators, and stakeholders to ensure secure system implementation.
• Maintain and update documentation repositories for C&A artifacts and audit materials.
• Support the development of Standard Operating Procedures (SOPs), Tactics, Techniques, and Procedures (TTPs), and cybersecurity methodologies.
• Provide briefings and status updates to government leadership on system security posture and compliance.
• Performs other related duties as assigned.

Qualifications

• Minimum of five (5) years of experience supporting DoD Certification and Accreditation (C&A) and RMF processes.
• Strong knowledge of NIST SP 800-53, NIST SP 800-37, and DoD cybersecurity policies.
• Hands-on experience working with eMASS and managing RMF artifacts.
• Experience supporting vulnerability management, including POA&M development and remediation tracking.
• Familiarity with DISA STIGs, SCAP tools, and enterprise vulnerability scanning solutions (e.g., ACAS, HBSS, Tanium).
• Experience supporting audits, inspections, and cybersecurity assessments in DoD environments.
• Strong analytical, documentation, and communication skills.
• Bachelor's Degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• Minimum of five (5) years of experience in cybersecurity, with direct experience in RMF, C&A, and vulnerability management in DoD or Federal environments.
• Must possess an active Secret clearance and meet IT-II (Non-Critical Sensitive) access requirements. (U.S. Citizenship required.)
• Ability to work within 50 miles of one of the following DLA Primary Major Subordinate Command (MSC) locations:
  • DLA Disposition Services, Battle Creek, MI
  • Defense Supply Center Columbus, Columbus, OH
  • DLA Dayton, WPAFB, Dayton, OH
  • DLA Headquarters, Fort Belvoir, VA
  • DLA Distribution, New Cumberland, PA
  • DLA Ogden Defense Depot, Ogden, UT
  • DLA Troop Support, Philadelphia, PA
  • DLA Aviation, Richmond, VA

Preferred

• DoD 8570/8140 IAM Level II certification (e.g., CAP, CISSP, CASP+).
• Additional cybersecurity certifications such as Security+ or CEH.
• Prior experience supporting large-scale enterprise DoD environments within DLA or similar agencies.

About Us

Diné Development Corporation (DDC) is a Navajo Nation owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.

Benefits

Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, paid time off, voluntary supplemental benefits, and access to an employee assistance program. The package also includes educational assistance, with tuition reimbursement.

EEO Statement

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify.