ISSE: RMF A&A Lead for DoD Systems (TS/SCI)

Apex Systems; Washington (District of Columbia); On-site; USD 272,214,000 - 298,002,000; Full time

Job summary

Everforth Apex seeks an Information Systems Security Engineer (ISSE) to lead accreditation reviews, document security controls, and navigate RMF-based A&A processes for system approvals. You’ll collaborate with multiple teams to ensure compliance and maintain authorization statuses.

Responsibilities include developing SSPs/CONOPS, creating A&A artifacts, coordinating with owners, and supporting audits. DoD 8570 IASAE II is required; CISSP Level III is preferred.

Qualifications

• Must meet DoD 8570.01-M IASAE Level II.
• CISSP Level III certification is preferred.

Responsibilities

• Lead Accreditation and Authorization (A&A) reviews by Group level ISSMs and Security Controls Assessors (SCA).
• Document security control implementations and gather artifacts for RMF and ICD 503.
• Develop Systems Security Plans (SSP) and CONOPS by understanding project architecture.
• Create A&A related documents such as Contingency Plans (CP), General User Guides (GUG), Privileged User Guides (PUG), and SOPs.
• Document Plans of Actions and Milestones (POA&Ms) and gather required evidence from system owners and engineering teams.
• Coordinate with personnel to obtain A&A content and navigate the customer’s A&A process for system authorizations.
• Monitor A&A projects and report on their status.
• Support audit liaison activities and compliance oversight to promote RMF compliance.
• Perform technical content reviews and edits for document updates as part of the Annual ISCM and OA Strategy Plan Update.
• Provide audit liaison support for internal and external audits and data calls.

Skills

ISSE RMF

A&A reviews

SSP development

Documentation

Education

IASAE Level II

CISSP Level III (preferred)

Job description

Everforth Apex seeks an Information Systems Security Engineer (ISSE) to lead accreditation reviews, document security controls, and navigate RMF-based A&A processes for system approvals. You’ll collaborate with multiple teams to ensure compliance and maintain authorization statuses.

Responsibilities include developing SSPs/CONOPS, creating A&A artifacts, coordinating with owners, and supporting audits. DoD 8570 IASAE II is required; CISSP Level III is preferred.