Top Secret Security Controls Assessor

Zachary Piper Solutions is seeking a primarily remote Top Secret Security Controls Assessor to support a long term program out of Washington, DC. The Top Secret Security Controls Assessor is responsible for enabling rapid, secure authorization and deployment of software into classified enterprise IL6 and operational defense environments.

Responsibilities of the Top Secret Security Controls Assessor includes:

• Assess and authorize software systems transitioning to high-side environments by conducting RMF-based security assessments and mapping IL4/5 systems to IL6 requirements.
• Enable rapid deployment of operational and enterprise technologies by validating architectures, inherited controls, and cloud boundaries while minimizing authorization friction.
• Support ATO decisions and reciprocity at scale by advising AOs/ISSMs, preparing audit-ready packages, and operationalizing cross-organization trust.
• Translate security risk into mission-aligned decisions by working directly with vendors and program leaders to balance speed, security, and operational impact for counter‑UAS missions.

Qualifications for the Top Secret Security Controls Assessor includes:

• 7-10+ years supporting ATO, RMF and NIST 800-53 frameworks from the SCA standpoint
• Strong experience with Cloud security in one of the following platforms (AWS, GCP, or Azure)
• Bachelor's degree is highly preferred
• IAT III Certification is highly preferred
• An active top secret clearance is required

Compensation for the Top Secret Security Controls Assessor includes:

• Compensation: $200,000 - $235,000+ **depending on experience and education**
• Benefits: Full benefits: Healthcare, Dental, Vision, 401k, PTO plan

This job opens for applications on 3/30/2025. Applications for this job will be accepted for at least 30 days from the posting date

#LI-AC2 #LI-REMOTE #LI-DNP

Top Secret Clearance, TS/SCI, Security Control Assessor, SCA, RMF, ATO, IL6, IL5, IL4, DoD, NIST 800-53, Enterprise Software, Mission Systems, Counter-UAS, DIU, JIATF-401, High-Side Systems, Cloud Security, AWS, Azure, GCP, Kubernetes, Docker, DevSecOps, Second Front Systems, PlatformOne, CloudOne, Risk Assessment, Reciprocity, Authorization, SSP, SAP, SAR, ISSM, Authorizing Official, System Integration, Command and Control, Classified Environments, Information Assurance, Cybersecurity, Secure Cloud, Software Authorization, Audit Readiness, Inherited Controls, Boundary Definition, Mission Risk, Operational Technology, Defense Innovation, Cleared Engineer, Federal Compliance, DC., remote, Washington DC