Principal Information System Security Officer

Clarity Innovations; Columbia (MD); Hybrid; USD 102.000 - 174.000; Vollzeit

Benefits dieser Stelle

Total Rewards package

Zusammenfassung

Clarity Innovations, a trusted national security partner, seeks a Principal Information System Security Officer in Columbia, MD. The ISSO will own authorization packages for a CUI platform, coordinate RMF transitions, and ensure accurate documentation across multiple teams.

Ideal candidates have a TS/SCI with polygraph, DoD IAM II/III, and 5+ years RMF experience. The role offers hybrid onsite work and exposure to advanced DoD security processes and automation opportunities.

Qualifikationen

• U.S. citizen able to obtain and maintain TS/SCI with CI polygraph.
• DoD IAM Level II or III certification (8570-M) required; 8140 transition in progress.
• 5+ yearsRMF authorization package experience (7+ preferred).
• Working knowledge RMF, NIST SP 800-37/53 Rev 4/5, 800-53B, 60, DoDI 8510.01.
• Experience drafting ISAs and interconnection agreements.
• Cloud and on-premise/hybrid network architecture understanding.

Aufgaben

• Owns and maintains the authorization BoE, SSP, and related artifacts.
• Manages transition from RMF Rev 4 to Rev 5 with ISSM coordination.
• Develops ISAs and interconnection documentation.
• Maintains POA&Ms, milestones, remediation artifacts and status.
• Prepares ConMon documentation and findings for the package.
• Maintains SBOM and CVE-based component remediation guidance.
• Documents changes with CCB and provides backfill for other ISSOs.
• Coordinates with security engineers, developers, SCAs, AO staff and government counterparts.

Kenntnisse

Security coordination

Written & verbal communication

Independent work

Ausbildung

B.S. in CS/Cybersecurity or related field

Tools

eMASS

Jobbeschreibung

Principal Information System Security Officer

Columbia, MD

Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD) to transform data into actionable intelligence, ensuring mission success in an evolving world.

Our mission-first software and data engineering platform modernizes data operations, utilizing advanced workflows, CI/CD, and secure DevSecOps practices. We focus on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring, enabling end-to-end solutions that drive operational impact.

We are committed to delivering cutting-edge tools and capabilities that address the most complex national security challenges, empowering our partners to stay ahead of emerging threats and ensuring the success of their critical missions. At Clarity, we are people-focused and set on being a destination employer for top talent, offering an environment where innovation thrives, careers grow, and individuals are valued. Join us as we continue to lead innovation and tackle the most pressing challenges in national security.

Position Overview

The ISSO supports the ISSM and owns the authorization documentation for this platform at the unclassified (CUI) classification level, across every development team on it. This is the single ISSO seat for that platform and classification combination at this time, and separate ISSOs cover the other environments. The ISSO is not embedded with any one team. Instead, the ISSO works with all of them, each with its own goals and priorities, and consolidates those into a single authorization package covering the entire platform. The role centers on establishing and maintaining ATO packages and their associated artifacts, maintaining interconnection agreements (ISAs and related), and transitioning the package from NIST SP 800-53 Rev 4 to Rev 5. Initial scope is the unclassified (CUI) system only. As clearance and access are completed, the ISSO also provides surge support and backfill for the ISSOs of other environments, including leave coverage. Success requires comfort switching context between teams, a commitment to keeping documentation accurate as the system changes, and interest in improving documentation and reporting through automation where practical.

Key Responsibilities

Owns and maintains the authorization package and its body of evidence (BoE), including the SSP, control statement responses, and supporting artifacts, so that documentation reflects the current state of the system. eMASS is the system of record for the BoE and POA&Ms in this role.

Executes the package transition from NIST SP 800-53 Rev 4 to Rev 5 in coordination with the ISSM, using artifacts demonstrating compliance provided by security engineers and engineering development teams

Develops and maintains interconnection and boundary documentation, including ISAs and related agreements

Owns POA&M entries and milestone tracking, coordinating with security engineers and development teams on remediation artifacts and status

Prepares ConMon documentation and reporting on schedule and ensures findings are accurately captured in the package

Maintains the SBOM and component version representation in the package, and validates components against CVE data and mitigation guidance. Where a component carries a vulnerability, identifies the required remediation (for example, moving to a fixed version or above) and communicates it to the owning team. Where a compensating control is proposed instead, participates in the architectural plan and in obtaining AO and government customer buy-in. The role identifies vulnerabilities and required mitigations; it does not choose between alternative libraries or products.

Participates in the CCB, documenting the authorization impact of proposed changes and keeping the package aligned with approved changes, including filling in for the project ISSM on the unclassified system when the ISSM is unavailable. Contractor ISSOs and ISSMs do not accept new risk. They determine whether a proposal aligns with the current risk posture and refer anything outside it to the appropriate government authority.

Coordinates with security engineers for technical evidence, with development teams across the platform for artifacts, and with SCAs, AO staff, and government counterparts on documentation requests and findings

Drafts risk acceptance and deviation documentation when assigned by the ISSM, for ISSM review before submission

Identifies project-specific security training and awareness gaps not covered by customer or company guidance, in coordination with the ISSM

Supports security authorization activities in compliance with RMF, DoDI 8510.01, and related DoD processes

Provides surge support and backfill for ISSOs of other environments, including leave coverage, as clearance and access allow. This is a longer-term expectation; initial duties are limited to the unclassified (CUI) system.

Qualifications

U.S. citizen able to obtain and maintain a TS/SCI clearance with CI polygraph, as longer-term duties include cross-environment coverage

Current DoD 8570.01-M IAM Level II or III certification. This program is currently bound by 8570 certification requirements and will transition to DoD 8140 qualification once the applicable 8140 certification list is approved.

5 or more years of relevant experience developing and maintaining RMF authorization packages (7 or more preferred)

Working knowledge of RMF, NIST SP 800-37, NIST SP 800-53 (Rev 4 and Rev 5), NIST SP 800-53B, NIST SP 800-60, and DoDI 8510.01

Experience maintaining the BoE, control statements, and POA&Ms in eMASS

Experience writing or maintaining ISAs or other interconnection agreements (NIST SP 800-47 Rev 1)

Understanding of network flows and architecture, especially cloud (Azure and AWS), on-premises, and hybrid environments, and the complexities each introduces

Ability to context switch across multiple teams with differing goals and priorities, and to consolidate them into one coherent authorization package for the whole platform

Familiarity with auditing and control assessments, including working with SCAs

Familiarity with the SDLC and with working across multiple Agile or DevSecOps development teams

Knowledge of government security requirements for unclassified and CUI systems

Strong written and verbal communication skills. Documentation in this environment is produced with limited AI/LLM support, because many LLMs are not approved to process CUI or above, so candidates must write clear, accurate technical documentation on their own.

Ability to work independently with engineering and government stakeholders

Bachelor’s degree in Computer Science, Cybersecurity, or a related technical discipline. No experience equivalency applies.

Preferred Qualifications

Active TS/SCI clearance with CI polygraph

Experience migrating an authorization package from NIST SP 800-53 Rev 4 to Rev 5

Experience taking a package from creation to full ATO

Experience with classified system authorization (for example CNSSI 1253 overlays)

Experience reading and interpreting vulnerability scan results to support CVE validation and POA&M entries

Experience mentoring junior teammates

Location and Clearance

This is a hybrid position with an expected 3-4 days onsite. Clarity Innovations strives to set consistent expectations and ensure a flexible and healthy work-life balance, but due to the position's nature and emergent customer needs, some weeks may exceed 3-4 days and others may require no onsite work. It will require a counterintelligence polygraph upon hiring if not already attained.

Principal Information Security Engineer

$102,200 - $173,700 USD

Pay Range

The posted pay range reflects the national salary range for this position and is provided to give candidates a general understanding of the compensation opportunity. The actual salary offered will be determined based on the requirements of the position and a variety of job-related factors, which may include geographic location, applicable Federal Government contract labor categories and wage rates, relevant experience, skills and competencies, education, certifications, and the scope and responsibilities of the role.

Because this position may be performed in multiple locations and may be subject to different contract requirements, the salary ultimately offered may vary based on the applicable location and contract. The posted range is not a guarantee of a specific starting salary or an indication that an offer will be made at any particular point within the range.

Total Rewards

In addition to competitive base pay, Clarity provides a Total Rewards package designed to attract and retain exceptional professionals committed to excellence. Our benefits reflect the value we place on skilled individuals who drive our impact in critical digital missions.

At Clarity, a career means joining a high-performing team advancing vital work in the digital landscape. We encourage you to consider the total value of joining us - competitive compensation, comprehensive benefits, and resources that support your growth and impact.

Our Total Rewards package includes performance-based bonuses, extensive medical, dental, and vision coverage, a 401(k) plan with company match, substantial paid time off and holidays, flexible work arrangements where possible, and a range of income protection benefits. We are committed to supporting your well-being, professional growth, and ability to contribute to essential digital missions.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.