ISSO: RMF & A&A Documentation Specialist

TM3 Solutions, Inc.; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

TM3 Solutions, Inc. seeks an experienced ISSO to lead security documentation and RMF activities under the DFC ISSO Support Services contract.

The role requires strong technical writing, strict version control, and deep familiarity with agency templates and authorization boundaries. The candidate will manage RMF/A&A documentation, ISCM strategies, vulnerability management, and incident response planning, ensuring compliance with federal security policies.

Qualifications

• Experience driving RMF lifecycle and A&A documentation for federal programs.
• Strong capability in writing, version control, and applying security templates.

Responsibilities

• RMF & A&A Management: Drive end-to-end RMF lifecycle for assigned systems, including SSPs and SARs.
• ISCM: Analyze logs, produce security health reports for leadership.
• Vulnerability & POA&M: Coordinate scans and plan remediation milestones.
• Security Engineering Support: Enforce secure baselines and DISA STIGs/CIS Benchmarks.
• Incident & Contingency Ops: Draft and update Incident Response and Contingency Plans.
• Compliance Enforcement: Validate access requirements and ensure security trainings are completed.
• Minimum 3–5 years of direct federal ISSO duties or information assurance support for FISMA Moderate or higher programs.

Skills

RMF & A&A Management

ISCM

Vulnerability & POA&M

Security Engineering

Incident Response & Contingency

Compliance Enforcement

Documentation Proficiency

Education

Bachelor's degree in Cybersecurity, IT, CS

Job description

TM3 Solutions, Inc. seeks an experienced ISSO to lead security documentation and RMF activities under the DFC ISSO Support Services contract.

The role requires strong technical writing, strict version control, and deep familiarity with agency templates and authorization boundaries. The candidate will manage RMF/A&A documentation, ISCM strategies, vulnerability management, and incident response planning, ensuring compliance with federal security policies.