Systems Planning And Analysis, Inc.

Lead RMF lifecycle activities, develop authorization packages, manage risk, and coordinate with security officials to maintain system security compliance. | 7+ years DoD cybersecurity experience, TS/SCI clearance, RMF and JSIG expertise, strong communication skills, and senior cybersecurity leadership. | Overview The Sea, Land, Air Analysis Group’s mission is to deliver objective analyses, plans and strategies to US Navy, US Marine Corps, US Air Force, other DoD, and Australian Defence Force clients to support technology development, acquisition, delivery and sustainment decisions. The group provides the core of SPA thought leadership on Undersea Strategy, Software Development and Cost Estimating, with additional benchmark capabilities in AI/ML & Decision Analytics, Modeling and Simulation, and Future Force Assessments. SPA has an immediate need for an Information Systems Security Manager. ResponsibilitiesThe Systems Security Manager position is responsible for leading Risk Management Framework (RMF) lifecycle activities from initial system categorization through achieving an Authority to Operate (ATO). The selected candidate will develop and maintain comprehensive authorization packages and coordinate closely with Security Control Assessor (SCA) and Authorizing Official (AO) representatives to adjudicate findings and manage risk. Additional responsibilities include preparing systems for ATO, Interim Authorization to Test (IATT), and continuous authorization; ensuring the implementation and validation of security controls in accordance with the Joint Special Access Program Implementation Guide (JSIG) and National Institute of Standards and Technology (NIST) Special Publication 800‑53. The Systems Security Manager will track and remediate Plans of Action and Milestones (POA&Ms), conduct internal compliance assessments and inspection preparation, assess technical risk and provide written recommendations to Government cybersecurity leadership, and ensure configuration management and baseline integrity. The role also includes delivering cybersecurity briefings to senior leadership and maintaining effective relationships with external stakeholders to support secure and mission‑ready system operations. Qualifications Required Qualifications: • Reports to Joint Base Anacostia-Bolling, up to full-time, based upon the needs of the client • Master’s Degree in Cybersecurity, Information Technology, Engineering, or related field (or equivalent experience) • 7+ years cybersecurity experience in DoD classified environments. (SAP/SCI) and 3+ years experience as ISSM or equivalent senior cybersecurity lead • Deep familiarity with: JSIG, RMF (DoDI 8510.01), ICD 503, NIST 800-53 and DoD 8570/8140 IAT Level III or IAM Level II/III certification • Strong written and verbal communication skills with experience preparing presentation materials for leadership audiences • Experience working directly with Authorizing Officials and SCAs and Experience in multi-system portfolio management • Active TS/SCI and the ability to maintain it throughout employment Desired Qualifications: • Certified Information Systems Security Professional (CISSP) Certification. Pay Range InformationAt SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Washington, DC, Pay Transparency Salary range: USD $160,000.00/Yr. - USD $180,000.00/Yr.

Lead RMF lifecycle activities and manage cybersecurity authorization packages for DoD classified systems. | 7+ years DoD cybersecurity experience with TS/SCI clearance, RMF, JSIG, and strong communication skills. | Overview The Sea, Land, Air Analysis Group’s mission is to deliver objective analyses, plans and strategies to US Navy, US Marine Corps, US Air Force, other DoD, and Australian Defence Force clients to support technology development, acquisition, delivery and sustainment decisions. The group provides the core of SPA thought leadership on Undersea Strategy, Software Development and Cost Estimating, with additional benchmark capabilities in AI/ML & Decision Analytics, Modeling and Simulation, and Future Force Assessments. SPA has an immediate need for an Information Systems Security Manager. ResponsibilitiesThe Systems Security Manager position is responsible for leading Risk Management Framework (RMF) lifecycle activities from initial system categorization through achieving an Authority to Operate (ATO). The selected candidate will develop and maintain comprehensive authorization packages and coordinate closely with Security Control Assessor (SCA) and Authorizing Official (AO) representatives to adjudicate findings and manage risk. Additional responsibilities include preparing systems for ATO, Interim Authorization to Test (IATT), and continuous authorization; ensuring the implementation and validation of security controls in accordance with the Joint Special Access Program Implementation Guide (JSIG) and National Institute of Standards and Technology (NIST) Special Publication 800‑53. The Systems Security Manager will track and remediate Plans of Action and Milestones (POA&Ms), conduct internal compliance assessments and inspection preparation, assess technical risk and provide written recommendations to Government cybersecurity leadership, and ensure configuration management and baseline integrity. The role also includes delivering cybersecurity briefings to senior leadership and maintaining effective relationships with external stakeholders to support secure and mission‑ready system operations. Qualifications Required Qualifications: • Reports to Joint Base Anacostia-Bolling, up to full-time, based upon the needs of the client • Master’s Degree in Cybersecurity, Information Technology, Engineering, or related field (or equivalent experience) • 7+ years cybersecurity experience in DoD classified environments. (SAP/SCI) and 3+ years experience as ISSM or equivalent senior cybersecurity lead • Deep familiarity with: JSIG, RMF (DoDI 8510.01), ICD 503, NIST 800-53 and DoD 8570/8140 IAT Level III or IAM Level II/III certification • Strong written and verbal communication skills with experience preparing presentation materials for leadership audiences • Experience working directly with Authorizing Officials and SCAs and Experience in multi-system portfolio management • Active TS/SCI and the ability to maintain it throughout employment Desired Qualifications: • Certified Information Systems Security Professional (CISSP) Certification. Pay Range InformationAt SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Washington, DC, Pay Transparency Salary range: USD $160,000.00/Yr. - USD $180,000.00/Yr.

Lead RMF lifecycle activities and manage authorization packages for DoD classified systems. | 7+ years DoD cybersecurity experience, TS/SCI clearance, and senior cybersecurity leadership. | Overview The Sea, Land, Air Analysis Group’s mission is to deliver objective analyses, plans and strategies to US Navy, US Marine Corps, US Air Force, other DoD, and Australian Defence Force clients to support technology development, acquisition, delivery and sustainment decisions. The group provides the core of SPA thought leadership on Undersea Strategy, Software Development and Cost Estimating, with additional benchmark capabilities in AI/ML & Decision Analytics, Modeling and Simulation, and Future Force Assessments. SPA has an immediate need for an Information Systems Security Manager. ResponsibilitiesThe Systems Security Manager position is responsible for leading Risk Management Framework (RMF) lifecycle activities from initial system categorization through achieving an Authority to Operate (ATO). The selected candidate will develop and maintain comprehensive authorization packages and coordinate closely with Security Control Assessor (SCA) and Authorizing Official (AO) representatives to adjudicate findings and manage risk. Additional responsibilities include preparing systems for ATO, Interim Authorization to Test (IATT), and continuous authorization; ensuring the implementation and validation of security controls in accordance with the Joint Special Access Program Implementation Guide (JSIG) and National Institute of Standards and Technology (NIST) Special Publication 800‑53. The Systems Security Manager will track and remediate Plans of Action and Milestones (POA&Ms), conduct internal compliance assessments and inspection preparation, assess technical risk and provide written recommendations to Government cybersecurity leadership, and ensure configuration management and baseline integrity. The role also includes delivering cybersecurity briefings to senior leadership and maintaining effective relationships with external stakeholders to support secure and mission‑ready system operations. Qualifications Required Qualifications: • Reports to Joint Base Anacostia-Bolling, up to full-time, based upon the needs of the client • Master’s Degree in Cybersecurity, Information Technology, Engineering, or related field (or equivalent experience) • 7+ years cybersecurity experience in DoD classified environments. (SAP/SCI) and 3+ years experience as ISSM or equivalent senior cybersecurity lead • Deep familiarity with: JSIG, RMF (DoDI 8510.01), ICD 503, NIST 800-53 and DoD 8570/8140 IAT Level III or IAM Level II/III certification • Strong written and verbal communication skills with experience preparing presentation materials for leadership audiences • Experience working directly with Authorizing Officials and SCAs and Experience in multi-system portfolio management • Active TS/SCI and the ability to maintain it throughout employment Desired Qualifications: • Certified Information Systems Security Professional (CISSP) Certification. Pay Range InformationAt SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Washington, DC, Pay Transparency Salary range: USD $160,000.00/Yr. - USD $180,000.00/Yr.

Lead RMF lifecycle activities to achieve system authorization and manage cybersecurity risk for DoD systems. | 7+ years DoD classified cybersecurity experience, TS/SCI clearance, RMF and JSIG expertise, and strong communication skills. | Overview The Sea, Land, Air Analysis Group’s mission is to deliver objective analyses, plans and strategies to US Navy, US Marine Corps, US Air Force, other DoD, and Australian Defence Force clients to support technology development, acquisition, delivery and sustainment decisions. The group provides the core of SPA thought leadership on Undersea Strategy, Software Development and Cost Estimating, with additional benchmark capabilities in AI/ML & Decision Analytics, Modeling and Simulation, and Future Force Assessments. SPA has an immediate need for an Information Systems Security Manager. ResponsibilitiesThe Systems Security Manager position is responsible for leading Risk Management Framework (RMF) lifecycle activities from initial system categorization through achieving an Authority to Operate (ATO). The selected candidate will develop and maintain comprehensive authorization packages and coordinate closely with Security Control Assessor (SCA) and Authorizing Official (AO) representatives to adjudicate findings and manage risk. Additional responsibilities include preparing systems for ATO, Interim Authorization to Test (IATT), and continuous authorization; ensuring the implementation and validation of security controls in accordance with the Joint Special Access Program Implementation Guide (JSIG) and National Institute of Standards and Technology (NIST) Special Publication 800‑53. The Systems Security Manager will track and remediate Plans of Action and Milestones (POA&Ms), conduct internal compliance assessments and inspection preparation, assess technical risk and provide written recommendations to Government cybersecurity leadership, and ensure configuration management and baseline integrity. The role also includes delivering cybersecurity briefings to senior leadership and maintaining effective relationships with external stakeholders to support secure and mission‑ready system operations. Qualifications Required Qualifications: • Reports to Joint Base Anacostia-Bolling, up to full-time, based upon the needs of the client • Master’s Degree in Cybersecurity, Information Technology, Engineering, or related field (or equivalent experience) • 7+ years cybersecurity experience in DoD classified environments. (SAP/SCI) and 3+ years experience as ISSM or equivalent senior cybersecurity lead • Deep familiarity with: JSIG, RMF (DoDI 8510.01), ICD 503, NIST 800-53 and DoD 8570/8140 IAT Level III or IAM Level II/III certification • Strong written and verbal communication skills with experience preparing presentation materials for leadership audiences • Experience working directly with Authorizing Officials and SCAs and Experience in multi-system portfolio management • Active TS/SCI and the ability to maintain it throughout employment Desired Qualifications: • Certified Information Systems Security Professional (CISSP) Certification. Pay Range InformationAt SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Washington, DC, Pay Transparency Salary range: USD $160,000.00/Yr. - USD $180,000.00/Yr.

Lead RMF lifecycle activities and manage authorization packages to ensure secure system operations for DoD clients. | 7+ years DoD cybersecurity experience, TS/SCI clearance, RMF and JSIG expertise, strong communication skills, and relevant certifications. | Overview The Sea, Land, Air Analysis Group’s mission is to deliver objective analyses, plans and strategies to US Navy, US Marine Corps, US Air Force, other DoD, and Australian Defence Force clients to support technology development, acquisition, delivery and sustainment decisions. The group provides the core of SPA thought leadership on Undersea Strategy, Software Development and Cost Estimating, with additional benchmark capabilities in AI/ML & Decision Analytics, Modeling and Simulation, and Future Force Assessments. SPA has an immediate need for an Information Systems Security Manager. ResponsibilitiesThe Systems Security Manager position is responsible for leading Risk Management Framework (RMF) lifecycle activities from initial system categorization through achieving an Authority to Operate (ATO). The selected candidate will develop and maintain comprehensive authorization packages and coordinate closely with Security Control Assessor (SCA) and Authorizing Official (AO) representatives to adjudicate findings and manage risk. Additional responsibilities include preparing systems for ATO, Interim Authorization to Test (IATT), and continuous authorization; ensuring the implementation and validation of security controls in accordance with the Joint Special Access Program Implementation Guide (JSIG) and National Institute of Standards and Technology (NIST) Special Publication 800‑53. The Systems Security Manager will track and remediate Plans of Action and Milestones (POA&Ms), conduct internal compliance assessments and inspection preparation, assess technical risk and provide written recommendations to Government cybersecurity leadership, and ensure configuration management and baseline integrity. The role also includes delivering cybersecurity briefings to senior leadership and maintaining effective relationships with external stakeholders to support secure and mission‑ready system operations. Qualifications Required Qualifications: • Reports to Joint Base Anacostia-Bolling, up to full-time, based upon the needs of the client • Master’s Degree in Cybersecurity, Information Technology, Engineering, or related field (or equivalent experience) • 7+ years cybersecurity experience in DoD classified environments. (SAP/SCI) and 3+ years experience as ISSM or equivalent senior cybersecurity lead • Deep familiarity with: JSIG, RMF (DoDI 8510.01), ICD 503, NIST 800-53 and DoD 8570/8140 IAT Level III or IAM Level II/III certification • Strong written and verbal communication skills with experience preparing presentation materials for leadership audiences • Experience working directly with Authorizing Officials and SCAs and Experience in multi-system portfolio management • Active TS/SCI and the ability to maintain it throughout employment Desired Qualifications: • Certified Information Systems Security Professional (CISSP) Certification. Pay Range InformationAt SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Washington, DC, Pay Transparency Salary range: USD $160,000.00/Yr. - USD $180,000.00/Yr.

Support NATO ACT product teams by applying user-centered design best practices, conducting user research, creating design artifacts, ensuring accessibility compliance, and collaborating within Agile/DevSecOps teams. | 3+ years UI/UX experience on complex projects, proficiency with modern design tools, knowledge of accessibility standards, strong communication skills, Agile/DevSecOps experience, NATO citizenship, and portfolio of work. | Overview Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our team is highly collaborative, producing Results that Matter. SPA offers opportunity, unique challenges, and a clear commitment to the mission. SPA: Objective. Responsive. Trusted. The Joint, Office of the Secretary of Defense, Interagency Division (JOID) provides expert support services to a range of customers spanning across the Department of Defense, Federal Civilian, and international markets. JOID provides a diverse portfolio of analytical and programmatic capabilities to help our customers make informed decisions on their most challenging issues. SPA's NATO Allied Command Transformation Group, within JOID, provides capability development, portfolio management, program management, quality management, cost estimation analysis, standardization, reporting, software solutions and information management, and capability management support. We also provide an improved capability requirements capture process, including the generation, documentation and tracing of user requirements, with appropriate technical scrutiny, over the entire lifecycle of the requirements from capability definition through capability realization and capability usage. We have a near-term need for a UI/UX Designer to provide remote support to NATO-ACT. Responsibilities NATO ACT has adopted Agile DevSecOps principles emphasizing rapid, iterative delivery cycles and user-driven development. Many capability development efforts are software-intensive, while others integrate hardware and software into larger systems and services. Modern continuous integration and delivery toolsets are applied to ensure transparency, traceability, and responsiveness, allowing solutions to be developed, fielded, and refined quickly while remaining aligned with operational requirements. The growing demand for digital solutions has led to an expanding backlog of projects requiring sustained contractor support. Candidates are embedded within ACT's cross-functional teams, working alongside staff in product-centric development efforts. These teams deliver Minimum Viable Products (MVPs) through rapid development cycles while simultaneously exploring emerging technologies that combine hardware and software integration. This dual-track approach ensures NATO can meet immediate operational needs while also experimenting with novel solutions that strengthen long-term capabilities. To sustain and expand this capability, HQ SACT is seeking contractor support across multiple labor categories, including Solution Architects, DevSecOps Engineers, Full-Stack Developers, UI/UX Designers, Security Professionals, Acquisition and Contracting Specialists, Product Managers, Systems Engineers, Network Engineers, and Service Desk Operators. Candidates will be integrated into ACT teams under the guidance of the COTR, working within an Agile DevSecOps framework to deliver user-centric, operationally relevant solutions at speed. May require, at the direction of the COTR, to undertake official travel in support of ACT, both within and outside NATO boundaries, for a maximum of 30 days per year or as otherwise agreed. The UI/UX Designer will be specifically tasked with the following: support product teams by applying User-Centered Design (UCD) best practices throughout the software lifecycle. Engage with end users through the agile product development process to ensure solutions meet operational needs. Establish feedback loops with customers and apply the Build-Measure-Learn cycle to guide iterative product development. Conduct user research, including interviews, usability testing, and surveys, to validate design assumptions. Create design artifacts such as sketches, flows, wireframes, high-fidelity mockups, and interactive prototypes. Ensure all design work complies with accessibility standards (WCAG, Section 508) and follows industry best practices for inclusive design. Collaborate with Product Managers on backlog refinement and prioritization to align design priorities with business value. Provide clarification to developers during implementation to ensure user expectations are met. Collaborate within cross-functional Agile/DevSecOps teams, actively participating in standups, demos, and retrospectives. Present and communicate design decisions effectively to stakeholders and senior leadership. Qualifications Required: Proven UI/UX industry experience on complex web and/or mobile application design projects. Strong skills in user research, usability testing, and user-centered design methods. 3+ years of experience, with experience collaborating in Agile/DevSecOps environments including backlog refinement with Product Managers. Proficiency with modern design and prototyping tools (e.g., Figma, Sketch, Adobe XD, Axure, InVision). Knowledge and practical application of accessibility standards (WCAG, Section 508) and inclusive design principles. Experience producing deliverables such as wireframes, user flows, prototypes, and high-fidelity mockups. Strong communication, facilitation, and stakeholder collaboration skills. Fluent in English (oral and written). Portfolio of work demonstrating past design solutions and methodology. Citizen of a NATO member nation. Desired: Bachelor's degree in Human Computer Interaction (HCI), Human Factors, Human Centered Design/Engineering, or related discipline. Certification in UI/UX or related field (UI Design, UX Analyst, Human-Centered Design). #J-18808-Ljbffr