Cyber Security Systems Engineer ISSE

Are you a seasoned Information Systems Security Engineer (ISSE) with deep expertise in Assessment & Authorization and a proven track record navigating complex government accreditation processes? We are looking for a technically adept, highly communicative professional ready to serve as a critical security engineering resource across multiple A&A efforts in direct support of a high-profile government customer.

As a Senior Cybersecurity Systems Engineer, you will be embedded across a Division-level portfolio of Assessment & Authorization (A&A) projects spanning multiple Branches — each at varying stages of development, accreditation, and long-term Operations & Maintenance. You will serve as the connective tissue between developers, security assessors, and senior leadership — translating complex technical implementations into clear, audit-ready security documentation, driving projects from Authority to Develop (ATD) through Interim Authority to Operate (IATT) and full Authority to Operate (ATO).

Your ability to manage multiple concurrent A&A efforts, communicate fluently across organizational levels, and produce thorough, compliance-ready documentation will be essential to the mission.

• Clearance:
  Active Top Secret/SCI clearance with Full Scope Polygraph (FS Poly) required
• Education:
  
  Bachelor's or Master's Degree preferred in Cybersecurity, Information Technology, Engineering, or a related discipline; degree requirement may be waived for candidates with direct prior ISSE support to this customer's agency
• Experience:
  
  11+ years of relevant cybersecurity systems engineering experience

• Assessment & Authorization (A&A):
  Extensive experience supporting Division-level A&A efforts across multiple projects and teams, including documentation, artifact collection, and coordination throughout the full accreditation lifecycle
• Risk Management Framework (RMF) & ICD 503:
  Deep familiarity with RMF processes and ICD 503 Security Accreditation requirements, including documenting security control implementations and gathering supporting artifacts
• Security Documentation:
  Proven ability to develop and maintain comprehensive A&A documentation, including Systems Security Plans (SSP), CONOPS, Contingency Plans (CP), General and Privileged User Guides (GUG/PUG), and Standard Operating Procedures (SOPs)
• POA&M Management:
  Experience documenting Plans of Actions and Milestones (POA&M) s, including implementation responses, mitigations, and evidence gathering from technical teams
• Accreditation Lifecycle Management:
  Ability to track and manage multiple concurrent A&A projects across ATD, IATT, and ATO milestones, including accreditation renewals and extensions
• Cross-Functional Coordination:
  Demonstrated ability to collaborate with developers, contractors, program staff, ISSOs, ISSMs, and Security Controls Assessors (SCAs) to navigate complex customer security processes
• Technical Translation:
  Exceptional ability to bridge the gap between technical implementation details and clearly written security documentation accessible to both technical and non-technical audiences
• Complex Network Environments:
  Working knowledge of shared networks, multiple security enclaves, and the unique security challenges they present
• Multi-Tasking & Communication:
  Ability to manage competing priorities across multiple projects and communicate effectively at all levels — from developers to senior leadership

• Direct Customer
  
  Experience:
  
  Prior ISSE and/or ISSO experience directly supporting this customer's agency is a significant advantage
• Security Tools:
  Hands-on experience with security tools and platforms including Greenlight, Road Runner, Rapid7, Web Inspect, App Detective, and Splunk
• Cloud Platforms:
  Experience with public, private, and hybrid cloud environments including AWS and Microsoft Azure
• Virtualization:
  Experience with VDI and VMware in enterprise or government environments
• Security
  
  Certifications:
  
  CISSP or GSLC strongly preferred; AWS Certified Security Specialty is a plus
• Emerging Security Domains:
  Foundational knowledge of cloud security control implementation, PKI, STIG compliance and vulnerability management, and Sec Dev Ops  principles is helpful
• Microsoft Office 365:
  Proficiency with Excel and the broader Microsoft Office 365 suite for…