A&A Specialist

About the role

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. The Assessment & Authorization (A&A) Specialist will support a Senior A&A Resource in executing Risk Management Framework (RMF) activities for DoD information systems.

Responsibilities

• Assist with developing and maintaining RMF documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
• Support activities required to obtain and maintain Authority to Operate (ATO) for assigned systems.
• Assist in conducting vulnerability and compliance scans using approved DoD security tools.
• Review scan results and support remediation efforts for STIG, IAVA, and security compliance findings.
• Help maintain system baseline configurations and configuration management documentation.
• Support monthly security updates, patch verification, and documentation of system changes.
• Assist with maintaining hardware inventory, labeling, and configuration records.
• Support security audits, assessments, and Government compliance reviews.
• Maintain documentation related to RMF, cybersecurity compliance, and configuration management.
• Collaborate with senior cybersecurity staff and Government stakeholders to support ongoing compliance activities.
• Participate in onsite support for classified A&A activities as required.

Qualifications

• Active DoD Secret clearance required.
• One (1) or more years of experience in cybersecurity, information assurance, RMF, system administration, or a related IT field.
• Basic understanding of the Risk Management Framework (RMF) and DoD cybersecurity principles.
• DoD 8570 IAT Level II certification (Security+ or equivalent) or the ability to obtain within six months of hire.
• Familiarity with RMF documentation and the A&A process is preferred.
• Exposure to STIGs, Nessus, ACAS, SCC, or similar vulnerability assessment tools is preferred.
• Experience supporting DoD or Federal IT environments is preferred.
• Strong organizational skills, attention to detail, and the ability to manage multiple priorities.
• Effective written and verbal communication skills.
• Ability to work collaboratively in a team environment while supporting senior technical staff and engaging with Government stakeholders.

Requirements of position

• Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions.
• Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others.
• May be exposed to dust/dirt, humidity, and noise.