Security Assessment & Accreditation Lead

Unissant, Inc. delivers innovative capabilities to the agencies that keep our nation healthy and safe. We apply our domain expertise, data acumen, and technology know-how to achieve breakthrough results for our clients. Working collaboratively, we advance missions and careers through a focus on honesty, integrity, and dependability.

About the role

The ideal candidate is a detail-oriented security professional with strong expertise in assessment and authorization activities across complex enterprise and cloud environments. This individual is comfortable leading ATO lifecycle efforts, partnering with stakeholders, and translating security requirements into practical, well-documented solutions that support compliance and mission success.

Responsibilities

• Lead the full lifecycle of Security Assessment and Authorization activities across enterprise systems, cloud environments, and integrated architectures.
• Oversee the development, review, and maintenance of ATO packages and associated security documentation.
• Guide the preparation of System Security Plans, Security Assessment Reports, POA&Ms, Risk Registers, and related compliance artifacts.
• Support assessment interviews, control validation activities, and risk-based decision documentation.
• Facilitate coordination with system owners, ISSOs, and stakeholders throughout authorization and remediation activities.
• Review packages prior to submission and help ensure documentation is complete, accurate, and aligned with federal requirements.
• Support continuous improvement of authorization processes, standards, templates, and reporting.

Requirements

• Minimum of 5–8 years of experience supporting Security Assessment and Authorization activities in large-scale and complex IT environments.
• Experience developing ATO packages for enterprise and cloud systems.
• Strong experience writing, assessing, and validating control implementation statements based on NIST guidance.
• Experience with Risk Management Framework activities, POA&M management, risk assessments, control testing, and stakeholder interviews.
• Knowledge of TIC 3.0, Zero Trust, cloud environments, and related enterprise security frameworks.
• Knowledge of trends in AI, securing AI applications, embedded artificial intelligence tools, data protections, and FedRAMP environments.
• Bachelor's Degree is required. Preferred field of study in Computer Science, Information Technology, Information Systems, Operations Management, or related field of study.
• MBA/Master's Degree in a relevant field of study preferred.
• Desired certifications include CISSP and CAP.
• Excellent verbal and written skills, ability to present proposals and performance data, comfortable interfacing all levels of organization.
• Ability to write clear and concise creative content in a highly confidential manner.
• Ability to obtain and maintain a Public Trust clearance.

Schedule

• Work under this task order is expected to be performed primarily remotely at the contractor's non-Federally controlled facility.
• Key personnel are expected to work onsite in Bethesda, Maryland two days per week, with onsite schedules and working hours subject to approval by Federal staff.
• Additional onsite meetings or temporary support within Federally controlled facilities may be required based on program needs.
• Flexible in working extended hours.

Environmental Requirements

• Mainly a routine office environment.
• May be required to lift up to ten (10) pounds.