ISSO Information Assurance Engineer – Federal Cloud

Onyx Consulting Services; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Onyx Consulting Services is seeking an experienced Information Assurance Engineer / ISSO to support a Federal Government customer. The role focuses on protecting government information systems through implementing and managing cybersecurity controls across cloud and on-prem environments.

The candidate will collaborate with system owners, engineers, and leadership to ensure compliance with RMF, NIST and FedRAMP requirements throughout the system lifecycle.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related discipline.
• 6+ years ISSO/Information Assurance experience.
• CompTIA Security+ or equivalent DoD-approved cybersecurity certification.
• Relevant certifications such as CAP CIS MCISA GIAC or equivalent DoD-approved certs.
• Experience with RMF, NIST SP 800-37/53, FISMA, and FedRAMP.
• Experience across cloud and on-premises environments with stakeholders.

Responsibilities

• Develop, maintain, and implement cybersecurity policies, standards, procedures, and communications.
• Design and implement security controls for information systems, applications, and networks.
• Conduct security assessments and remediate findings; track compliance with NIST/FISMA/FedRAMP.
• Participate in incident response planning, testing, and documentation.
• Monitor security tools, logs, and events; support audits and remediation efforts.
• Develop, maintain, and monitor POA&Ms; report status to leadership.

Skills

ISSO/Information Assurance experience

Security certifications

Analytical and communication skills

Stakeholder collaboration

Education

Bachelor’s degree in Computer Science / IT / Cybersecurity

Tools

eMASS

Job description

Onyx Consulting Services is seeking an experienced Information Assurance Engineer / ISSO to support a Federal Government customer. The role focuses on protecting government information systems through implementing and managing cybersecurity controls across cloud and on-prem environments.

The candidate will collaborate with system owners, engineers, and leadership to ensure compliance with RMF, NIST and FedRAMP requirements throughout the system lifecycle.