Information System Security Manager

Fidelity Partners; San Antonio (TX); On-site; USD 76,000 - 108,000; Full time

Job summary

Fidelity Partners seeks an Information System Security Manager (ISSM) to support the Air Force Research Laboratory in San Antonio, TX. The role focuses on RMF, cybersecurity, and DoD 8140 work roles, ensuring risk management and compliance across classified and unclassified systems.

The position is on-site with typical 7am–5pm hours, requires U.S. citizenship and a current Secret clearance; base-year compensation is $66.44 per hour.

Qualifications

• Must possess a Bachelor of Science degree in Information Technology or Cybersecurity.
• Must have at least five years of demonstrated RMF and cybersecurity experience, with no more than a three-consecutive-year lapse in cyberspace work.
• Must maintain a current, valid CompTIA Security+ certification.

Responsibilities

• Lead ISSM and DoD 8140 work role 722 responsibilities for assigned systems and enclaves.
• Validate that personnel meet required baseline certifications before elevated access.
• Administer privileged-access agreements and conduct recurring audits of privileged accounts.
• Advise management regarding risk levels, security posture, vulnerabilities, mitigations, and changes.

Skills

RMF

Cybersecurity

Risk assessment

Privileged access

Education

BS in IT/Cybersecurity

Tools

eMASS

ACAS

STIG

Job description

Information System Security Manager ISSM - San Antonio, Texas

This Position Is Contingent Upon Contract Award

Work Location

Department of the Air Force

Air Force Research Laboratory - 711th Human Performance Wing

Tri-Service Research Laboratory, Building 3260

Joint Base San Antonio-Fort Sam Houston, San Antonio, TX

Position Details

Number of Positions: One full-time position (1.0 FTE; approximately 1,880 priced hours for the base year).

Estimated Total Compensation: $66.44 per hour.

Customer: Air Force Research Laboratory (AFRL), 711th Human Performance Wing, Bioeffects Division.

Type of Employment: Full-time.

Working Hours: Normally Monday through Friday between 7:00 AM and 5:00 PM, not to exceed 40 hours per week. After-hours support may be required for specific tasks.

Work Arrangement: Primarily on-site at the Tri-Service Research Laboratory. Temporary alternate work locations may be assigned by the COR; general telework authorization is not specified.

Period of Performance: Base period from November 30, 2026 through November 29, 2027, with a possible extension under FAR 52.217-8.

Citizenship and Access: U.S. citizenship is required for contractor personnel requiring access to USAF bases, AFRL facilities, or Government IT networks unless a written waiver is approved by the Contracting Officer.

Security Requirements: A current Secret clearance is highly desired. A Secret clearance is required for personnel who need classified-information or IT-II access; the highest classification level is Secret.

Travel: No travel is anticipated. Any required travel would be added by separate bilateral modification.

Summary of Services

The Information System Security Manager will lead cybersecurity and RMF support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting the Tri-Service Research Laboratory. The role performs DoD 8140 work role 722 functions and provides enterprise risk, authorization, compliance, vulnerability-management, access-control, audit, and advisory support.

Mandatory Qualifications

Must possess a Bachelor of Science degree in Information Technology or Cybersecurity.

Must have at least five years of demonstrated RMF and cybersecurity experience, with no more than a three-consecutive-year lapse in cyberspace work.

Must maintain a current, valid CompTIA Security+ certification.

Must meet applicable DoD Manual 8140.03 education, training, certification, and intermediate-level work-role requirements for the assigned labor category.

Must execute a nondisclosure agreement before the start of performance.

A current Secret clearance is highly desired and may be required before performing duties involving classified information, SIPRNet, or IT-II access.

Duties and Responsibilities

Perform ISSM and DoD 8140 work role 722 responsibilities for assigned classified and unclassified systems and enclaves.

Validate that administrative and technical personnel meet required baseline certifications and training before receiving elevated access.

Administer privileged-access agreements and conduct recurring audits of privileged accounts.

Advise senior management and the Authorizing Official regarding risk levels, security posture, vulnerabilities, mitigations, and changes affecting cybersecurity posture.

Direct and coordinate enterprise RMF, ATO, eMASS, STIG, vulnerability-management, audit, inspection, documentation, access-control, and remediation activities.

Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, policy, and Risk Management Framework requirements.

Maintain valid Authorizations to Operate, current eMASS packages, security controls, assessment procedures, plans of action and milestones, and required RMF artifacts.

Prepare and maintain system security plans, assessment reports, risk reports, topology diagrams, hardware/software inventories, standard operating procedures, and related evidence packages.

Use ACAS or other approved scanning tools to identify and assess vulnerabilities and maintain STIG checklists and documented remediation plans.

Support audits, inspections, configuration-management reviews, vulnerability assessments, cloud-security activities, and cybersecurity reporting.

Coordinate account onboarding and offboarding, DD Form 2875 workflows, workforce qualification tracking, user training, media destruction, agreements, and classified-media handling as assigned.

Provide cybersecurity consulting and customer support, participate in the AFRL Cybersecurity Working Group, prepare meeting minutes and action tracking, and brief Government and industry stakeholders.

Support cybersecurity pilot projects, Inspector General activities, documentation development, system discovery, and implementation of compliant technical solutions.

Protect classified, controlled, proprietary, and sensitive information and comply with OPSEC, security, public-release, network-access, and facility requirements.

Duties and responsibilities are subject to change if work schedules, locations, and/or priorities change based on Government or program needs.

Required Candidate Submission Documents

Resume not exceeding five pages and documenting the required five years of RMF/cybersecurity experience.

Copy of qualifying bachelor's degree and current Security+ certification.

Evidence of applicable DoD 8140.03 work-role qualifications and current Secret clearance, if held.

Wet-signed Letter of Intent.

Signed nondisclosure agreement by the start of performance and any security, identity, CAC, network-access, training, or onboarding documents requested by Fidelity Partners or the Government/client.

About Us

Fidelity Partners is an Inc. 5000 USA company that provides medical, technical, logistical, and administrative services to the federal government and commercial clients across the country. Fidelity offers competitive salaries and benefits packages.

Qualified applicants are encouraged to learn more about us at www.fidelitypartners.org, call us at [phone], or visit our careers page to join our team.

Fidelity Partners provides equal employment opportunities without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected in accordance with applicable federal, state, and local laws (EOE).