Senior Cybersecurity Systems Engineer (ISSE) | Assessment & Authorization | Active TS/SCI with CI or Full Scope Poly RequiredAre you a seasoned Information Systems Security Engineer (ISSE) with deep expertise in Assessment & Authorization and a proven track record navigating complex government accreditation processes? We are looking for a technically adept, highly communicative professional ready to serve as a critical security engineering resource across multiple A&A efforts in direct support of a high-profile government customer.
WHAT YOU'LL DO
As a Senior Cybersecurity Systems Engineer, you will be embedded across a Division-level portfolio of Assessment & Authorization (A&A) projects spanning multiple Branches — each at varying stages of development, accreditation, and long-term Operations & Maintenance. You will serve as the connective tissue between developers, security assessors, and senior leadership — translating complex technical implementations into clear, audit-ready security documentation, driving projects from Authority to Develop (ATD) through Interim Authority to Operate (IATT) and full Authority to Operate (ATO). Your ability to manage multiple concurrent A&A efforts, communicate fluently across organizational levels, and produce thorough, compliance-ready documentation will be essential to the mission.
WHAT WE'RE LOOKING FOR
Required Qualifications:
- Clearance: Active Top Secret/SCI clearance with Full Scope Polygraph (FS Poly) required
- Education: Bachelor's or Master's Degree preferred in Cybersecurity, Information Technology, Engineering, or a related discipline; degree requirement may be waived for candidates with direct prior ISSE support to this customer's agency
- Experience: 11+ years of relevant cybersecurity systems engineering experience
Required Technical Skills:
- Assessment & Authorization (A&A): Extensive experience supporting Division-level A&A efforts across multiple projects and teams, including documentation, artifact collection, and coordination throughout the full accreditation lifecycle
- Risk Management Framework (RMF) & ICD 503: Deep familiarity with RMF processes and ICD 503 Security Accreditation requirements, including documenting security control implementations and gathering supporting artifacts
- Security Documentation: Proven ability to develop and maintain comprehensive A&A documentation, including Systems Security Plans (SSP), CONOPS, Contingency Plans (CP), General and Privileged User Guides (GUG/PUG), and Standard Operating Procedures (SOPs)
- POA&M Management: Experience documenting Plans of Actions and Milestones (POA&M)s, including implementation responses, mitigations, and evidence gathering from technical teams
- Accreditation Lifecycle Management: Ability to track and manage multiple concurrent A&A projects across ATD, IATT, and ATO milestones, including accreditation renewals and extensions
- Cross-Functional Coordination: Demonstrated ability to collaborate with developers, contractors, program staff, ISSOs, ISSMs, and Security Controls Assessors (SCAs) to navigate complex customer security processes
- Technical Translation: Exceptional ability to bridge the gap between technical implementation details and clearly written security documentation accessible to both technical and non-technical audiences
- Complex Network Environments: Working knowledge of shared networks, multiple security enclaves, and the unique security challenges they present
- Multi-Tasking & Communication: Ability to manage competing priorities across multiple projects and communicate effectively at all levels — from developers to senior leadership
NICE TO HAVE
Preferred Qualifications:
- Direct Customer Experience: Prior ISSE and/or ISSO experience directly supporting this customer's agency is a significant advantage
- Security Tools: Hands-on experience with security tools and platforms including Greenlight, RoadRunner, Rapid7, WebInspect, App Detective, and Splunk
- Cloud Platforms: Experience with public, private, and hybrid cloud environments including AWS and Microsoft Azure
- Virtualization: Experience with VDI and VMware in enterprise or government environments
- Security Certifications: CISSP or GSLC strongly preferred; AWS Certified Security Specialty is a plus
- Emerging Security Domains: Foundational knowledge of cloud security control implementation, PKI, STIG compliance and vulnerability management, and SecDevOps principles is helpful
- Microsoft Office 365: Proficiency with Excel and the broader Microsoft Office 365 suite for documentation, reporting, and project tracking
i270 Solutions Group LLC., is an Equal Opportunity/Affirmative Action employer and all qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran or disability status, or any other characteristic protected by law.