Information System Security Officer (ISSO) – TS/SCI

Strategic Business Systems (SBS); Jessup (MD); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) with company match

Paid time off & holidays

AWS certification support

Job summary

Strategic Business Systems, Inc. (SBS) seeks experienced ISSOs for AWS-based, highly secure environments. Lead RMF activities, maintain ATO packages, implement continuous monitoring, and ensure compliance with NIST and DoD requirements across multiple domains in a TS/SCI setting.

The role collaborates with engineering teams to maintain secure cloud environments for DoD and IC missions, with on-site work in Jessup, MD. Strong RMF, cloud security, and AWS services experience are essential.

Qualifications

• Active TS/SCI Clearance.
• 5+ years of Information Assurance, Cybersecurity, or Information System Security experience.
• Minimum 2 years supporting RMF and NIST SP 800-53.
• Minimum 1 year supporting AWS cloud security environments.
• Experience creating and maintaining complete ATO packages.
• Experience with SSPs, POA&Ms, Continuous Monitoring, and Control Implementation Statements.
• Strong understanding of vulnerability management and security compliance.

Responsibilities

• Develop, maintain RMF documentation supporting IATT and ATO packages.
• Author and maintain SSPs, POA&Ms, Control Implementation Statements, and Continuous Monitoring docs.
• Support full RMF lifecycle per DoDI 8510.01 and NIST SP 800-53 Rev. 5.
• Monitor security posture across AWS environments supporting IL2, IL4, Secret, TS workloads.
• Assess cloud environments against NIST 800-53 controls and configure AWS security services.
• Collaborate with cloud engineers, ISSOs, ISSEs, and customer security teams to improve posture.

Skills

Active TS/SCI Clearance

5+ years Information Assurance

RMF / NIST SP 800-53

AWS cloud security

ATO package experience

SSP/POA&Ms/Continuous Monitoring

Vulnerability management

Communication & collaboration

Tools

AWS GuardDuty

AWS Security Hub

AWS Config

IAM

Organizations / SCPs

Job description

• Palo Alto

Information System Security Officer (ISSO) – TS/SCI (AWS Cloud / RMF)

Location: Jessup,MD , onsite

Clearance Required: Active TS/SCI

Security Clearance: Active Top Secret/SCI clearance

Employment Type: Full-Time

About SBS

Strategic Business Systems, Inc. (SBS) delivers AWS-aligned mission-critical cloud, cybersecurity, software engineering, and data modernization solutions to the U.S. Department of Defense, the Intelligence Community, and federal civilian agencies. We hire engineers, architects, and consultants who want to do hands-on work on high-impact national-security programs while collaborating directly with AWS Professional Services. Our culture is technical, lean, and clearance-friendly: we invest in certifications, retain talent through long-duration prime engagements, and provide a comprehensive benefits package.

Position Overview

SBS is seeking experienced Information System Security Officers (ISSOs) to support Amazon Web Services (AWS) Federal customers operating within highly secure, classified cloud environments. This position is responsible for leading Risk Management Framework (RMF) activities, maintaining Authorization to Operate (ATO) packages, implementing continuous monitoring strategies, and ensuring compliance with NIST and DoD cybersecurity requirements across multiple security domains. The ideal candidate possesses a strong background in RMF, cloud security, and AWS-native security services while partnering with engineering teams to maintain secure cloud environments supporting Department of Defense and Intelligence Community missions.

Responsibilities

Risk Management Framework (RMF)

• Develop, maintain, and update RMF documentation supporting IATT and ATO packages.
• Author and maintain:
  • System Security Plans (SSPs)
  • Security Control Family Plans (AC, IA, SC, SI, etc.)
  • POA&Ms
  • Control implementation statements
  • Continuous Monitoring documentation
• Support the full RMF lifecycle in accordance with DoDI 8510.01 and NIST SP 800-53 Rev. 5.

Cloud Security

• Monitor security posture across AWS environments supporting IL2, IL4, Secret, and TS workloads.
• Assess cloud environments against NIST 800-53 security controls.
• Configure and monitor AWS security services including:
  • GuardDuty
  • Security Hub
  • AWS Config
  • IAM
  • AWS Organizations / SCPs
• Assist engineering teams in implementing secure cloud architectures.

Vulnerability & Compliance Management

• Review vulnerability findings and support remediation efforts.
• Maintain POA&Ms and continuous monitoring activities.
• Work with third-party security tools including:
  • Palo Alto
  • ACAS
  • Elastic
• Ensure compliance with customer cybersecurity policies and accreditation requirements.

Collaboration

• Partner with cloud engineers, ISSOs, ISSEs, architects, and customer security teams.
• Participate in security assessments and authorization reviews.
• Provide guidance during audits and compliance activities.
• Support ongoing improvements to cloud security posture and automation.

Required Qualifications

• Active TS/SCI Clearance.
• 5+ years of Information Assurance, Cybersecurity, or Information System Security experience.
• Minimum 2 years supporting RMF and NIST SP 800-53.
• Minimum 1 year supporting AWS cloud security environments.
• Experience creating and maintaining complete ATO packages.
• Experience with SSPs, POA&Ms, Continuous Monitoring, and Control Implementation Statements.
• Working knowledge of AWS security services.
• Strong understanding of vulnerability management and security compliance.

Preferred Qualifications

• Experience with eMASS, Xacta, Keyhole, or equivalent GRC platforms.
• Experience supporting DoD IL2/IL4/Secret/TS cloud environments.
• Familiarity with AWS Landing Zone Accelerator (LZA).
• Experience implementing Zero Trust security principles.
• DoD 8570/8140 IAM Level II or IAT Level III certification.
• One or more of the following:
  • CISSP
  • CISM
  • CAP
  • CASP+

Desired Skills

• Excellent communication and documentation skills.
• Strong analytical and troubleshooting abilities.
• Ability to work independently in classified environments.
• Experience supporting highly regulated Federal or Intelligence Community customers.

Compensation & Benefits

SBS offers a comprehensive total-rewards package, including a market competitive salary along with:

• Comprehensive medical, dental, and vision coverage; HSA-eligible plan options available
• 401(k) retirement plan with company match (vesting schedule per Plan Document)
• Paid Time Off, federal holidays, and floating holiday for personal observance
• Annual professional development support for AWS certifications, training, and conferences
• Employee referral program where applicable and documented by program policy
• Life, AD&D, and short- / long-term disability insurance
• Telework and flexible-schedule support where mission and contract permit
• Mission-focused federal contractor supporting national-security customers

About SBS

Strategic Business Systems, Inc. (SBS) is a national Information Technology services company headquartered in the Washington, D.C. metropolitan area. SBS provides IT infrastructure design, integration, and operational services. Our expertise spans the full spectrum of infrastructure technologies, including networking, servers, data storage, disaster recovery, cybersecurity, and internet technologies.

Equal Employment Opportunity

SBS is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to age, gender, gender identity, sex, sexual orientation, color, race, creed, national origin, religion, marital status, parental status, citizenship status, ancestry, physical or mental disability, genetic information, veteran status, military status, or any other classification protected by federal, state, or local laws.

Accommodations

If you need an accommodation while seeking employment with SBS, please email [e-mail]. Accommodations are made on a case‑by‑case basis.

No Unsolicited Agency Referrals

SBS does not accept unsolicited resumes from staffing agencies. Any resumes submitted without a prior agreement will be considered the property of SBS.