What are the responsibilities and job description for the Authorization & Accreditation Specialist position at Bespoke Technologies, Inc.?
BT-282 – Authorization and Accreditation Specialist
Location: Dulles, VA (fully on-site, no remote option)
The Contractor Shall Provide Authorization And Accreditation (A&A) And Risk Management Framework (RMF) Support To Facilitate The Accreditation Of The Sponsor's Environments And Applications Through The Following Activities
Location: Dulles, VA (fully on-site, no remote option)
- MUST HAVE AN ACTVE CLEARANCE TO APPLY. Those without a security clearance will not be considered.**
The Contractor Shall Provide Authorization And Accreditation (A&A) And Risk Management Framework (RMF) Support To Facilitate The Accreditation Of The Sponsor's Environments And Applications Through The Following Activities
- Preparing security documentation, such as the Body of Evidence (BOE) and System Security Plans
- Applying control implementations and managing the Plan of Action and Milestones (POAM)
- Achieving and maintaining accreditations for applications, including the EMMA system, on an accelerated timeline.
- Prepare triage information, create sponsor briefings and debriefings, and prepare documentation for the required oversight organizations' work items.
- Correctly apply criticality determinations, security objectives, intelligence overlays, assets, and project artifact requirements for various RMF Steps for differing applications.
- Summarize and prepare technical descriptions, security details, architecture diagrams, and other information to deliver application-specific CONOPS and System Security Plans (SSP).
- Apply Control Implementations consistent with the requirements of the application design to meet the Sponsor's security requirements.
- Facilitate, communicate, and complete the required steps to achieve an Authorization to Develop or Interim Authority to Test or Authority to Operate status within the Sponsor's framework.
- Manage Plan of Actions and Milestones (POAM).
- Perform monitoring of accredited applications.
- Interface with technical representatives, Cyber Security, and Information System Security Managers