DoW Information Systems Security Manager - Cloud (On-site)

Tetrad Digital Integrity LLC; Arlington (VA); Presencial; USD 165.000 - 215.000; Jornada completa

Descripción de la vacante

Tetrad Digital Integrity LLC (TDI) is seeking an on-site ISSM to support DoW cloud enterprise information systems at IL7 in Northern VA. You will lead RMF activities, develop SSPs, SARs, and POA&Ms, ensuring alignment with NIST SP 800-53 and Cloud SRG.

The role requires Top Secret clearance and hands-on cloud/container security expertise (Kubernetes, Docker). Collaborative work with DevSecOps and compliance teams is essential to maintain secure, compliant cloud workloads in a demanding

Formación

• Active Top Secret clearance required.
• 8+ years of cybersecurity experience with RMF activities for DoW systems.
• Hands-on cloud experience (AWS/Azure/GCP) with IAM, VPC, Kubernetes.
• Experience leading RMF ATO processes in DoW environments.
• Knowledge of container security best practices (Docker/Kubernetes).
• Familiarity with Generative AI security considerations (LLMs/AI/ML).
• Strong communication across technical and non-technical stakeholders.

Responsabilidades

• Lead RMF activities across all phases: categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Provide guidance on DoW cloud security policies, NIST SP 800-53 controls, CNSS policies, and Cloud SRG requirements.
• Conduct security architecture reviews and security engineering analysis for cloud-native workloads.
• Evaluate security controls for Kubernetes, Docker, and container orchestration.
• Assess risks related to generative AI components and AI/ML workloads.
• Develop and maintain SSPs, SARs, POA&Ms and RMF documentation.
• Perform threat modeling, vulnerability assessments, and risk analysis for cloud/AI.
• Interface with architects, developers, and DevSecOps to secure SDLC.
• Lead the compliance team through SCAs and coordinate with third-party assessors.
• Monitor and report security posture via Continuous Monitoring.
• Minimal travel.

Conocimientos

RMF processes

Cloud security

Kubernetes

Docker

Risk assessment

Communication

Security architecture

Educación

Bachelor’s degree in Cybersecurity/CS/IT

Herramientas

Xacta

eMASS

OpenRMF

Descripción del empleo

Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customersfrom increasing threats and vulnerabilities in this digital age.

TDI is seeking a hands-on Information Systems Security Manager (ISSM) to support the Department of War cloud enterprise information systems at Impact Level 7 (IL7) in an on-site role in Northern VA. You’ll manage mission-critical workloads within modern cloud environments, driving ATO efforts and translating RMF, NIST SP 800-53, and Cloud SRG requirements into actionable security deliverables.

This is an on-site position supporting mission-critical Department of War programs. An active Top Secret clearance is required.

RESPONSIBILITIES:

• Lead and support RMF activities throughout all phases (categorization, control selection, implementation, assessment, authorization, and continuous monitoring).
• Provide expert guidance on DoWcloud security policies, NIST SP 800-53 controls, CNSS policies, and DoW-specific frameworks such as Cloud Computing SRG and AI-specific guidance.
• Conduct security architecture reviews and security engineering analysis for cloud-native and containerized workloads.
• Evaluate security controls associated with Kubernetes, Docker, and container orchestration platforms.
• Assess security risks related to generative AI components, including large language models (LLMs) and AI/ML workloads, ensuring responsible and compliant use.
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and related RMF documentation.
• Perform threat modeling, vulnerability assessments, and risk analysis tailored to cloud environments and AI technologies.
• Interface with system architects, developers, and DevSecOps teams to integrate security throughout the Software Development Lifecycle (SDLC).
• Lead the compliance team throughsecurity control assessments (SCAs) and coordinate with third-party assessors.
• Monitor, track, and report on security compliance posture through Continuous Monitoring (ConMon) processes.
• Minimal travel will be required.

QUALIFICATIONS:

• Active Top Secret security clearance.
• Advanced proficiency for Information System Security Manager IAW DoD 8140.
• Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology,and 8+ years of cybersecurity experience, including demonstrated experience supporting Risk Management Framework (RMF) activities for Department of War(DoW) systems.
• Experience leading the Assessment and Authorization processes from start to finish in classified DoW environments.
• Candidates shouldhave practical, hands-on experience with at least one cloud platform, including AWS, Microsoft Azure, or Google Cloud Platform (GCP), with demonstrated experience in IAM, VPC/networking, Kubernetes, and cloud security services.
• Knowledge of containerized environments (e.g., Docker, Kubernetes) and container security best practices.
• Familiarity with Generative AI technologies, including LLMs and AI/ML security considerations.
• Deep understanding of NIST SP 800-53, DoD RMF, FedRAMP, and other relevant cybersecurity frameworks.
• Experience writing and maintaining RMF artifacts such as SSPs, POA&Ms, and SARs.
• Strong communication skills and ability to collaborate effectively with technical and non-technical stakeholders.
• Experience with security risk assessments in DoWenvironments

PREFERRED QUALIFICATIONS:

• Advanced cloud security certifications, such as Google Professional Cloud Security Engineer, Cloud Certified Security Professional or Azure equivalent.
• Experience integrating DevSecOps pipelines with RMF compliance processes.
• Familiarity with automation tools for RMF documentation and control testing (e.g., Xacta, eMASS, OpenRMF).

PAY RANGE:

The anticipated salary range for this position is $165,000 - $215,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range.

TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.

“TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.”