On-Site Information Security Lead (ISSO) | RMF & Audits

CGS Federal (Contact Government Services); Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health, Dental, and Vision

Life Insurance

401k

Flexible Spending Account (Health, Dep

Paid Time Off and Holidays

Job summary

CGS Federal (Contact Government Services) is seeking a Mid-Level FSR ISSO to be embedded on-site with U.S. Government customers, ensuring secure, compliant operation of a production-grade data and application platform used in mission-critical environments.

You will serve as the primary authority for system security and compliance, working hands-on with live systems while partnering with engineers, operators, and customer security teams. CGS offers growth opportunities and a collaborative culture.

Qualifications

• Background in systems administration, software development, or deep familiarity with Linux-based systems.
• Experience accrediting IT systems against U.S. Government standards such as NIST SP 800-53, CNSSI 1253, and DISA STIGs.
• Hands-on experience supporting accreditation using eMASS or Xacta.
• Experience collaborating with engineering teams to implement and validate security configurations.
• Understanding of configuration management and automation tools (e.g., Puppet, Terraform, CloudFormation, Chef, Ansible).
• Comfort using version control systems such as Git
• Ability to independently use vulnerability scanning tools such as Nessus and OpenSCAP
• Experience working in cloud and on-premises environments, including AWS
• Strong ability to produce clear, concise technical documentation, stay organized, and maintain attention to detail
• Curiosity, critical thinking, and the ability to evaluate real-world implementations against formal security requirements
• Active TS/SCI Clearance or Eligibility

Responsibilities

• Act as the primary on-site point of contact for security and compliance requirements across one or more U.S. Government customers
• Support system accreditation and authorization activities using frameworks such as RMF or DIACAP
• Collaborate with software, systems, and field engineers to ensure required security controls, configurations, and policies are correctly implemented
• Analyze deployed software implementations and assess alignment with applicable security requirements
• Build, standardize, and maintain security documentation, including SSPs, POA&Ms, control narratives, and supporting artifacts
• Generate, validate, and organize evidence of compliance once security settings are applied
• Assemble accreditation artifacts into a structured, auditable repository
• Support audits, assessments, and ongoing compliance activities throughout the system lifecycle
• Maintain the ongoing security and trust of customers through hands-on system access and coordination with engineering and operations teams
• Support software operating across AWS, Azure, on-premises, and at multiple classification levels
• Operate in environments where the platform, threat landscape, and operational needs are continuously evolving

Skills

On-site security liaison

RMF/DIACAP knowledge

Collaboration with engineers

System security documentation

Accreditation evidence processing

AWS/Azure/on-prem security

Technical documentation

TS/SCI Clearance or Eligibility

Tools

eMASS

XACTA

Puppet

Terraform

CloudFormation

Chef

Ansible

Git

Nessus

OpenSCAP

AWS

Azure

Job description

CGS Federal (Contact Government Services) is seeking a Mid-Level FSR ISSO to be embedded on-site with U.S. Government customers, ensuring secure, compliant operation of a production-grade data and application platform used in mission-critical environments.

You will serve as the primary authority for system security and compliance, working hands-on with live systems while partnering with engineers, operators, and customer security teams. CGS offers growth opportunities and a collaborative culture.