Information Systems Security Manager (ISSM)

Aalyria; Washington; Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work model

Equity options

Competitive compensation and benefits

Job summary

Aalyria Technologies seeks an experienced Information Systems Security Manager to lead accreditation, operation, and sustained compliance of a multi-domain classified facility in Chantilly, VA. Hybrid/remote during design, transitioning to on-site after facility standup.

Primary interface with AOs, ISSOs, and program security; hands-on with ICD 503, RMF, TEMPEST/EMSEC, and A&A processes. Strong leadership and policy development required in a high-trust government environment.

Qualifications

• Active Top Secret clearance with SCI eligibility; must be in-scope and fully adjudicated at time of hire.
• 10+ years of progressive information security experience, with 5+ years in ISSM/ senior ISSO in IC/IC-adjacent environment.
• Experience with ICD 503 and IC-specific A&A processes; RMF experience
• Multi-domain classified network experience (JWICS, SIPRNet, NIPRNet) and accreditation differences
• Experience managing concurrent ATO/ATC for multiple systems across authorities
• Familiarity with TEMPEST/EMSEC and RED/BLACK separation requirements
• DoD 8140/8570 IAM Level III certification required at hire; CISSP/CISM accepted
• Experience developing SSPs, POA&M, and continuous monitoring docs
• Strong written and verbal communication; interface with senior government security personnel
• U.S. citizenship required

Responsibilities

• Lead A&A activities for multiple systems in accordance with ICD 503, RMF and IC directives.
• Develop, maintain SSPs, SARs, and ATO/ATC packages across enclaves.
• Coordinate pre-authorization with government AOs and track POA&M items to closure.
• Support SCIF accreditation activities and ICD 705 compliance with TEMPEST/EMSEC.
• Coordinate network connection approvals with government centers and authorities.
• Design and implement continuous monitoring programs; maintain configuration and vulnerability posture.
• Serve as ISSO during initial facility standup and transition duties to security team.
• Conduct regular security assessments, vulnerability scans, and remediation tracking.
• Lead incident detection, response, and after-action remediation with FSO coordination.
• Maintain system documentation, baselines, inventories and change records.

Skills

ISSM experience

A&A RMF

Multi-domain networks

Policy development

Stakeholder coordination

Incident response

Communication skills

Education

DoD 8140 / 8570 IAM Level III

CISSP/CISM or equivalent

Tools

TEMPEST/EMSEC

Job description

Role Overview:

Aalyria Technologies is seeking a highly experienced Information Systems Security Manager (ISSM) to lead the accreditation, operation, and sustained compliance of a newly established, multi-domain classified facility in Chantilly, Virginia. This is a senior individual contributor role with broad technical and programmatic responsibility across a complex, multi-network environment supporting multiple government customers at varying classification levels.

The ISSM will serve as the primary interface between Aalyria and government Authorizing Officials (AOs), ISSOs, and program security personnel across multiple networks and enclaves. The selected candidate will join during the facility standup phase and will have significant influence over security architecture, policy, and procedures from the ground up. This role requires deep, hands‑on familiarity with IC‑specific accreditation frameworks, multi‑domain network environments, and the operational discipline to build and sustain a rigorous information security program. During the facility standup phase, the ISSM will carry direct ISSO responsibilities for initial systems prior to additional security team staffing, these responsibilities will diminish as the security team grows. This is a high‑trust, high‑autonomy position working directly alongside the FSO.

This position will begin as hybrid/remote during the facility design and pre‑accreditation phase, which is anticipated to span approximately 12 months. During this period, the ISSM will conduct AO coordination, SSP development, architecture review, and policy drafting, work that does not require facility access. The ISSM will transition to full‑time on‑site at the Chantilly, Virginia facility upon lease execution and facility standup. Candidates must be willing and able to commit to on‑site operations upon facility opening.

Key Responsibilities:

Accreditation & Authority

• Lead all Assessment & Authorization (A&A) activities for multiple classified and unclassified information systems in accordance with ICD 503, RMF, and applicable IC and DoD directives.
• Develop, maintain, and submit System Security Plans (SSPs), Security Assessment Reports (SARs), and complete ATO/ATC packages across multiple network enclaves and authorization authorities.
• Manage pre‑authorization coordination with government AOs and system owners; track and drive Plan of Action & Milestones (POA&M) items to resolution.
• Support physical SCIF accreditation activities and coordinate with the FSO on ICD 705 compliance and TEMPEST/EMSEC requirements during and after facility construction.
• Coordinate network connection approvals with relevant government network operations centers and accrediting authorities across all authorized enclaves.

Operations & Continuous Monitoring

• Design and implement continuous monitoring programs for all authorized systems; maintain situational awareness of configuration status, vulnerability posture, and compliance across the environment.
• Serve as ISSO for multiple systems during the initial facility standup phase, managing transition of responsibilities to the broader security team as it is built out.
• Conduct regular security assessments, configuration compliance reviews, and vulnerability scans; track and verify remediation to closure.
• Lead incident detection, response, reporting, and after‑action remediation in coordination with the FSO and relevant government security personnel.
• Maintain all system documentation, security configuration baselines, hardware/software inventories, and change management records in compliance with applicable directives.

Program & Stakeholder Coordination

• Interface directly with program security officers for Special Access Program (SAP) network requirements, accreditation coordination, and sustained compliance.
• Coordinate with government network and security teams for classified network connectivity, sustainment, and issue resolution across multiple enclaves.
• Develop and deliver initial and recurring security awareness training for personnel operating in a multi‑domain, multi‑classification environment.
• Collaborate closely with the FSO on personnel security, physical security, and integrated facility compliance matters; serve as a force multiplier in a lean security team environment.

Architecture & Policy

• Review and approve system architecture changes, new hardware/software requests, and network modifications from a security compliance perspective.
• Advise on RED/BLACK separation requirements and TEMPEST/EMSEC standards as applied to the facility’s classified network and physical infrastructure.
• Develop and enforce information security policies, procedures, and standard operating procedures specific to multi‑domain operations environments.
• Maintain current working knowledge of applicable IC directives, NIST standards, CNSS policies, and DoD instructions as they evolve.

Required Qualifications:

• Active Top Secret clearance with SCI eligibility; must be in‑scope and fully adjudicated at time of hire, no interim clearances considered.
• 10+ years of progressive information security experience, with a minimum of 5 years in an ISSM or senior ISSO role within an IC or IC‑adjacent contractor environment.
• Demonstrated, hands‑on experience with ICD 503 and IC‑specific A&A processes, candidates with DoD RMF experience only will require supplemental evaluation against IC requirements.
• Multi‑domain classified network experience including JWICS, SIPRNet, and NIPRNet; working knowledge of the accreditation and operational differences between enclaves.
• Experience managing concurrent ATO/ATC processes for multiple systems across different government authorization authorities simultaneously.
• Working familiarity with TEMPEST/EMSEC standards and their application to classified facility network infrastructure and RED/BLACK separation requirements.
• DoD 8140 / 8570 IAM Level III certification required at time of hire — CISSP, CISM, or equivalent accepted.
• Experience developing and maintaining SSPs, POA&M, and continuous monitoring documentation in an operational environment.
• Strong written and verbal communication skills; demonstrated ability to interface credibly with senior government security and program personnel.
• U.S. citizenship required, no exceptions.

Clearance & Access Requirements:

This position requires an active, fully adjudicated Top Secret clearance with SCI eligibility at time of hire. No interim clearances will be accepted for this role under any circumstances.

• Active TS//SCI required at time of offer; in‑scope and fully adjudicated
• SAP access eligibility required; candidates with existing SAP accesses will be prioritized.
• Counterintelligence (CI) or Full Scope Polygraph (FSP) strongly preferred; candidates holding a current polygraph will be prioritized. Candidates without an existing polygraph will be considered — this is not a disqualifier.
• A SAP briefing will be required for this role. Candidates must be eligible and willing to accept SAP accesses upon hire.
• Relevant compartment accesses above baseline TS//SCI are a significant differentiator and will be considered during the selection process.

Preferred Qualifications:

• Prior experience within Air Force intelligence or Air Force‑affiliated SCI enclave environments — direct AFSCI enclave experience is a significant differentiator.
• Existing SCI compartment accesses above baseline TS//SCI; candidates with current relevant accesses will be prioritized.
• Experience supporting SAP network accreditation, sustained operations, and direct program security officer coordination.
• Experience supporting new SCIF standup and initial accreditation under ICD 705, including pre‑construction AO coordination and post‑construction inspection preparation.
• Prior ISSM experience for a facility operating 4 or more concurrent classified and unclassified network environments.
• Familiarity with NRO network security requirements and approval processes.
• Experience developing operational guidance and training for users working across multiple classification levels and network environments simultaneously.
• Prior FSO, deputy FSO, or physical/personnel security experience — valuable in the context of a lean, integrated security team.
• Counterintelligence (CI) or Full Scope Polygraph (FSP) strongly preferred and will be weighted heavily in the selection process. Candidates without a current polygraph will be considered; willingness to complete one is a plus.

What We Offer:

• Innovative Environment: Work at a cutting‑edge company shaping the future of aerospace communications.
• Impactful Work: Directly contribute to critical national security programs and initiatives.
• Growth Opportunities: Expand your career with opportunities for professional development and advancement.
• Inclusive Culture: Be part of a collaborative, supportive, and inclusive workplace where your contributions matter.
• Flexibility: Flexible working arrangements including hybrid remote/in‑office schedules.
• Compensation and Equity: Competitive salary, comprehensive benefits (401(k), dental, vision, health, life insurance), paid time off, and equity options.

ITAR/EAR Requirements:

This position involves access to export‑controlled information. To comply with U.S. government export regulations, applicants must meet one of the following criteria:

(A) Qualify as a U.S. person, which includes:

• U.S. citizen or national
• U.S. lawful permanent resident (green card holder)
• Refugee under 8 U.S.C. 1157
• Asylee under 8 U.S.C. 1158

(B) Be eligible to access export‑controlled information without requiring an export authorization.

(C) Be eligible and reasonably likely to obtain the necessary export authorization from the appropriate U.S. government agency.

The company reserves the right to decline pursuing an export licensing process for legitimate business‑related reasons.

Equal Opportunity Employer Statement:

Aalyria is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability status, genetic information, protected veteran status, or any other characteristic protected by law. Qualified applicants from all backgrounds are encouraged to apply.