A&A Specialist

Clearance: Secret, with TS eligibility

Onsite: Work Hours: M-F - 10:00AM-7:30 PM

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise - across the organization and around the world

The Assessment & Authorization (A&A) Specialist will support a Senior A&A Resource in executing Risk Management Framework (RMF) activities for DoD information systems. This role is ideal for an early-career cybersecurity professional looking to grow their experience in RMF, system authorization, and cybersecurity compliance within a DISA environment. Working under the guidance of senior team members, the specialist will assist with maintaining Authority to Operate (ATO) packages, supporting security assessments, performing compliance scans, maintaining RMF documentation, and helping ensure systems remain compliant with DoD cybersecurity requirements. The position includes remote support with occasional onsite work at DISA's Pensacola facility to support classified A&A activities.

Responsibilities:

• Assist with developing and maintaining RMF documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
• Support activities required to obtain and maintain Authority to Operate (ATO) for assigned systems.
• Assist in conducting vulnerability and compliance scans using approved DoD security tools.
• Review scan results and support remediation efforts for STIG, IAVA, and security compliance findings.
• Help maintain system baseline configurations and configuration management documentation.
• Support monthly security updates, patch verification, and documentation of system changes.
• Assist with maintaining hardware inventory, labeling, and configuration records.
• Support security audits, assessments, and Government compliance reviews.
• Maintain documentation related to RMF, cybersecurity compliance, and configuration management.
• Collaborate with senior cybersecurity staff and Government stakeholders to support ongoing compliance activities.
• Participate in onsite support for classified A&A activities as required.

Qualifications:

• Active DoD Secret clearance required.
• One (1) or more years of experience in cybersecurity, information assurance, RMF, system administration, or a related IT field.
• Basic understanding of the Risk Management Framework (RMF) and DoD cybersecurity principles.
• DoD 8570 IAT Level II certification (Security+ or equivalent) or the ability to obtain within six months of hire.
• Familiarity with RMF documentation and the A&A process is preferred.
• Exposure to STIGs, Nessus, ACAS, SCC, or similar vulnerability assessment tools is preferred.
• Experience supporting DoD or Federal IT environments is preferred.
• Strong organizational skills, attention to detail, and the ability to manage multiple priorities.
• Effective written and verbal communication skills.
• Ability to work collaboratively in a team environment while supporting senior technical staff and engaging with Government stakeholders.

Requirements of position: Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise

Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.