Federal ISSO: Cloud Security Architect & RMF Lead

Guidehouse; Springfield (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Mobility Stipend

Tuition Reimbursement

Parental Leave & Adoption Assistance

401(k)

Job summary

Guidehouse is seeking an experienced Information Security Systems Officer (ISSO) to support a major federal initiative. You will lead RMF, ATO, and continuous monitoring activities across hybrid cloud and on-prem environments, mentoring junior staff and guiding security teams.

You will design secure cloud architectures (AWS, Azure), implement NIST 800-53 controls, and drive cloud‑security posture using tools like Splunk, Nessus, and CrowdStrike.

Qualifications

• Bachelor’s degree required; active clearance highly preferred.
• 5+ years in cybersecurity or secure systems engineering; federal/cloud focus.
• Experience with RMF, ATO, continuous monitoring, NIST 800-53 controls.

Responsibilities

• Lead design and engineering of secure cloud architectures (AWS, Azure, hybrid).
• Implement and validate NIST 800-53 controls and cloud security services.
• Conduct threat modeling, risk assessments, and architecture reviews.
• Oversee cloud baselines using STIGs, CIS Benchmarks, SCAP; drive vulnerability/compliance efforts.
• Guide DevSecOps in CI/CD, container security, and IaC validation.
• Produce architecture diagrams and engineering artifacts.
• Mentor junior ISSEs and act as escalation point.

Skills

Project leadership

Cross-functional collaboration

Cloud security

Security governance

RMF & ATO

NIST 800-53

Communication skills

Analytical thinking

Education

Bachelor's degree

Master's degree preferred

Tools

Splunk

Nessus

CrowdStrike

ACAS/SCAP

Job description

Guidehouse is seeking an experienced Information Security Systems Officer (ISSO) to support a major federal initiative. You will lead RMF, ATO, and continuous monitoring activities across hybrid cloud and on-prem environments, mentoring junior staff and guiding security teams.

You will design secure cloud architectures (AWS, Azure), implement NIST 800-53 controls, and drive cloud‑security posture using tools like Splunk, Nessus, and CrowdStrike.