ISSO - Federal Cloud Security Lead (RMF/ATO)

Guidehouse; McLean (VA); On-site; USD 85,000 - 141,000; Full time

Benefits offered by this job

Mobility stipend

Tuition reimbursement

Medical, Rx, Dental & Vision Insurance

Job summary

Guidehouse seeks an experienced Information Security Systems Officer (ISSO) to support a major federal initiative. The ISSO guides system owners and security teams through RMF, ATO, and continuous monitoring, ensuring full compliance with NIST controls in hybrid cloud/on-prem environments.

The role mentors junior staff, leads audits, and collaborates with DevSecOps on secure CI/CD and cloud architecture deliverables. Requires active Secret clearance and DoD policy familiarity.

Qualifications

• Active Secret clearance is required and must be maintained
• Bachelor’s degree from an accredited university
• Must have command approval to participate in DoW SkillBridge program
• Within 180 days of separation or retirement from the U.S. Armed Forces
• Eligible for Honorable Discharge
• 1–7 years of cybersecurity or secure systems engineering experience, including cloud architecture
• Strong understanding of security frameworks and compliance standards (e.g., NIST RMF, SP 800-53 Rev 5, DoD 8570)
• Experience with SIEM, vulnerability scanners, and endpoint protection platforms

Responsibilities

• Lead design and engineering of secure cloud architectures across AWS, Azure, and hybrid environments.
• Implement and validate NIST 800-53 security controls and cloud-native security services (IAM, encryption, segmentation, logging).
• Conduct cloud threat modeling, risk assessments, and architecture reviews.
• Oversee cloud configuration baselines using STIGs, CIS Benchmarks, and SCAP.
• Drive cloud vulnerability and compliance efforts using ACAS/Nessus and cloud-security posture tools.
• Support RMF engineering activities including boundary definition, inheritance documentation, and authorization packages.
• Integrate cloud-security capabilities such as Sentinel, Splunk, and SIEM logging pipelines.
• Guide DevSecOps teams on secure CI/CD, container security, and infrastructure-as-code validation.
• Produce cloud architecture diagrams, design documentation, and engineering artifacts.
• Mentor junior and mid-level ISSEs and act as a technical escalation point for cloud engineering issues.

Skills

Security frameworks

RMF / NIST 800-53

DoD 8570

Cloud security design

SIEM (Splunk)

Vulnerability scanning (Nessus)

Endpoint protection (CrowdStrike)

Team leadership

Communication

RMF engineering oversight

Education

Bachelor’s degree

Master’s degree (preferred)

Tools

Splunk

Nessus

CrowdStrike

PowerShell

Python

Bash

Job description

Guidehouse seeks an experienced Information Security Systems Officer (ISSO) to support a major federal initiative. The ISSO guides system owners and security teams through RMF, ATO, and continuous monitoring, ensuring full compliance with NIST controls in hybrid cloud/on-prem environments.

The role mentors junior staff, leads audits, and collaborates with DevSecOps on secure CI/CD and cloud architecture deliverables. Requires active Secret clearance and DoD policy familiarity.