Are you a seasoned Information Systems Security Engineer (ISSE) with deep expertise in Assessment & Authorization and a proven track record navigating complex government accreditation processes? We are looking for a technically adept, highly communicative professional ready to serve as a critical security engineering resource across multiple A&A efforts in direct support of a high-profile government customer.
WHAT YOU'LL DOAs a Senior Cybersecurity Systems Engineer, you will be embedded across a Division-level portfolio of Assessment & Authorization (A&A) projects spanning multiple Branches — each at varying stages of development, accreditation, and long-term Operations & Maintenance. You will serve as the connective tissue between developers, security assessors, and senior leadership — translating complex technical implementations into clear, audit-ready security documentation, driving projects from Authority to Develop (ATD) through Interim Authority to Operate (IATT) and full Authority to Operate (ATO).
Your ability to manage multiple concurrent A&A efforts, communicate fluently across organizational levels, and produce thorough, compliance-ready documentation will be essential to the mission.
Required Qualifications:
- Clearance:
Active Top Secret/SCI clearance with Full Scope Polygraph (FS Poly) required - Education:
Bachelor's or Master's Degree preferred in Cybersecurity, Information Technology, Engineering, or a related discipline; degree requirement may be waived for candidates with direct prior ISSE support to this customer's agency - Experience:
11+ years of relevant cybersecurity systems engineering experience
Skills:
- Assessment & Authorization (A&A):
Extensive experience supporting Division-level A&A efforts across multiple projects and teams, including documentation, artifact collection, and coordination throughout the full accreditation lifecycle - Risk Management Framework (RMF) & ICD 503:
Deep familiarity with RMF processes and ICD 503 Security Accreditation requirements, including documenting security control implementations and gathering supporting artifacts - Security Documentation:
Proven ability to develop and maintain comprehensive A&A documentation, including Systems Security Plans (SSP), CONOPS, Contingency Plans (CP), General and Privileged User Guides (GUG/PUG), and Standard Operating Procedures (SOPs) - POA&M Management:
Experience documenting Plans of Actions and Milestones (POA&M) s, including implementation responses, mitigations, and evidence gathering from technical teams - Accreditation Lifecycle Management:
Ability to track and manage multiple concurrent A&A projects across ATD, IATT, and ATO milestones, including accreditation renewals and extensions - Cross-Functional Coordination:
Demonstrated ability to collaborate with developers, contractors, program staff, ISSOs, ISSMs, and Security Controls Assessors (SCAs) to navigate complex customer security processes - Technical Translation:
Exceptional ability to bridge the gap between technical implementation details and clearly written security documentation accessible to both technical and non-technical audiences - Complex Network Environments:
Working knowledge of shared networks, multiple security enclaves, and the unique security challenges they present - Multi-Tasking & Communication:
Ability to manage competing priorities across multiple projects and communicate effectively at all levels — from developers to senior leadership
Preferred Qualifications:
- Direct Customer
Experience:
Prior ISSE and/or ISSO experience directly supporting this customer's agency is a significant advantage - Security Tools:
Hands-on experience with security tools and platforms including Greenlight, Road Runner, Rapid7, Web Inspect, App Detective, and Splunk - Cloud Platforms:
Experience with public, private, and hybrid cloud environments including AWS and Microsoft Azure - Virtualization:
Experience with VDI and VMware in enterprise or government environments - Security
Certifications:
CISSP or GSLC strongly preferred; AWS Certified Security Specialty is a plus - Emerging Security Domains:
Foundational knowledge of cloud security control implementation, PKI, STIG compliance and vulnerability management, and Sec Dev Ops principles is helpful - Microsoft Office 365:
Proficiency with Excel and the broader Microsoft Office 365 suite for…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).