DoW Information Systems Security Manager - Cloud; On-site

Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age.

TDI is seeking a hands-on Information Systems Security Manager (ISSM) to support the Department of War cloud enterprise information systems at Impact Level 7 (IL7) in an on-site role in Northern VA. You’ll manage mission-critical workloads within modern cloud environments, driving ATO efforts and translating RMF, NIST SP 800-53, and Cloud SRG requirements into actionable security deliverables.

This is an on-site position supporting mission-critical Department of War programs. An active Top Secret clearance is required.

• Lead and support RMF activities throughout all phases (categorization, control selection, implementation, assessment, authorization, and continuous monitoring).
• Provide expert guidance on DoWcloud security policies, NIST SP 800-53 controls, CNSS policies, and DoW-specific frameworks such as Cloud Computing SRG and AI-specific guidance.
• Conduct security architecture reviews and security engineering analysis for cloud-native and containerized workloads.
• Evaluate security controls associated with Kubernetes, Docker, and container orchestration platforms.
• Assess security risks related to generative AI components, including large language models (LLMs) and AI/ML workloads, ensuring responsible and compliant use.
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and related RMF documentation.
• Perform threat modeling, vulnerability assessments, and risk analysis tailored to cloud environments and AI technologies.
• Interface with system architects, developers, and Dev Sec Ops  teams to integrate security throughout the Software Development Lifecycle (SDLC).
• Lead the compliance team through security control assessments (SCAs) and coordinate with third-party assessors.
• Monitor, track, and report on security compliance posture through Continuous Monitoring (Con Mon) processes.
• Minimal travel will be required.

• Active Top Secret security clearance.
• Advanced proficiency for Information System Security Manager IAW DoD 8140.
• Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology,and 8+ years of cybersecurity experience, including demonstrated experience supporting Risk Management Framework (RMF) activities for Department of War(DoW) systems.
• Experience leading the Assessment and Authorization processes from start to finish in classified DoW environments.
• Candidates should have practical, hands-on experience with at least one cloud platform, including AWS, Microsoft Azure, or Google Cloud Platform (GCP), with demonstrated experience in IAM, VPC/networking, Kubernetes, and cloud security services.
• Knowledge of containerized environments (e.g., Docker, Kubernetes) and container security best practices.
• Familiarity with Generative AI technologies, including LLMs and AI/ML security considerations.
• Deep understanding of NIST SP 800-53, DoD RMF, FedRAMP, and other relevant cybersecurity frameworks.
• Experience writing and maintaining RMF artifacts such as SSPs, POA&Ms, and SARs.
• Strong communication skills and ability to collaborate effectively with technical and non-technical stakeholders.
• Experience with security risk assessments in Do Wenvironments

• Advanced cloud security certifications, such as Google Professional Cloud Security Engineer, Cloud Certified Security Professional or Azure equivalent.
• Experience integrating Dev Sec Ops  pipelines with RMF compliance processes.
• Familiarity with automation tools for RMF documentation and control testing (e.g., Xacta, eMASS,…