Security Lead/ISSO

Lentech, Inc.; Elkridge (MD); On-site; USD 125,000 - 162,000; Full time

Job summary

Lentech, Inc. is seeking a Security Lead/ISSO to drive security architecture for a Microsoft Dynamics 365 and Power Platform-based CMS supporting government legal services. The role emphasizes active security workstreams, incident response, and compliance artifacts during the 180-day mobilization and beyond.

The position requires U.S. citizenship, eligibility for a PUBLIC TRUST, 8+ years as an ISSO, deep NIST SP 800-53 experience, Dataverse security expertise, and certifications such as CISSP or

Qualifications

• Must be a US citizen with ability to obtain a PUBLIC TRUST.
• 8+ years of ISSO experience in government or regulated environments.
• Deep experience with NIST SP 800-53 and GCC security requirements.
• Proficiency with Dataverse security boundaries and data isolation.

Responsibilities

• Lead security artifacts: SSP, privacy measures, incident response plans.
• Manage incident notification path and government reporting processes.
• Enforce default-deny access controls for attorney work product and review monthly access.
• Integrate privacy-by-design and CUI handling into data models.
• Maintain POA&M and support independent assessments and readiness.
• Participate in Change Control Board and governance activities.

Skills

8+ YOE as ISSO

NIST SP 800-53

GCC familiarity

Dataverse security

CUI protection

Security governance

Tools

MS Dynamics 365/Power Platform Security

Job description

Lentech is seeking a high-Performance, multi-disciplinary team to lead a technical implementation of a Microsoft Dynamics 365 and Power Platform-based case management system (CMS). This mission-critical project and CMS supports legal services to children in support of the U.S. Government. U.S. Citizenship is required along with the ability to positively pass a public trust background investigation.

The primary implementation timeline occurs across the first 180 days of the project and moves into steady state operations for the remainder of the first year. A five-year follow-on contract is expected based on positive performance in the first year. The implementation follows an aggressive timeline divided into four key phases: Mobilization, Core Operations, Fully Functional Delivery, and Steady-state Operations.

This effort demands a collaborative team capable of maintaining operational continuity throughout the transition and into operations. You will be working with a primary legal team providing the CMS to the lawyers working each individual case. Candidates must be prepared to handle high-velocity delivery, strict data privilege boundaries, and the technical rigor required to support vulnerable populations.

Role Overview:

The Security Lead/ISSO is a critical position for working towards an ATO during the implementation period. This role ensures that security and privacy are treated as active implementation workstreams and release criteria rather than end-of-project documentation tasks. The lead is responsible for the overall security architecture, ensuring all security documents are created, producing all mandatory compliance artifacts, and establishing the tested protocols for incident response.

Core Responsibilities:

• Security Artifact Production: Lead the development of a comprehensive artifact package, including the System Security Plan (SSP), FIPS 199 categorization, e-Authentication Risk Assessment, Business Impact Analysis (BIA), and the system contingency plan.
• Incident Management: Establish and manage the mandatory incident notification path and support the formal government reporting process.
• Access and Privilege Control: Implement "default-deny" access boundaries for attorney work product, manage organization isolation for external providers, and conduct monthly account and access reviews with retained evidence.
• Data Privacy Integration: Integrate privacy-by-design requirements into the data model, including data minimization, PII review protocols, and ensuring no Social Security Numbers are stored by design.
• Assessment and Findings Support: Maintain the Plan of Action and Milestones (POA&M) for open findings and provide the objective evidence required to support independent assessments and Government connection readiness.
• Governance: Participate in the Change Control Board (CCB) to review and approve all security-relevant and baseline changes.
• Technical Resilience: Implement and test backup, recovery, and reconstitution procedures based on Organization-approved RTO (Recovery Time Objective) and RPO (Recovery Point Objective) values.

Required Technical Knowledge:

• Must be a US citizen
• Must hold a PUBLIC TRUST or be eligible
• 8+ YOE as an ISSO
• Compliance Frameworks: Deep experience with NIST SP 800-53 controls and the security standards required for Government Community Cloud (GCC) environments. Understanding of FedRAMP inheritance and full compliance using a CSP provided Customer Responsibility Matrix (CRM)
• MS Dynamics 365/Power Platform Security: Expert knowledge of Dataverse security boundaries, including role-based access, field-level security, and organization-scoped data isolation.
• CUI Protection: Background in handling Controlled Unclassified Information (CUI) and maintaining the privilege boundary between program data and attorney work product.
• Professional Certifications:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• Experience-based certifications in FedRAMP or NIST-aligned federal security auditing.

Project Context:

Success in this role is measured by the delivery of a tested, supportable security posture that satisfies all RTM control identifiers. The Security and Privacy Lead must ensure the system is ready for the Full Functional Release and provides all necessary artifacts to meet the final transition deadline

About Lentech, Inc.

Lentech, Inc.,providestechnology-enabled IT Solutions and Mission Technical Solutions to civil, defense and intelligence customers. Through our accumulated years of experience, industryexpertise, and strategic partnerships, Lentech has built mission-critical solutions for our federal and commercial customers.Lentech’sclients achieve full life-cycle support and cost-effective managed services supporting enterprise computing and applications initiatives for Government agencies.Lentech’sMission Technical Solutions Division is focused onprovidingengineering, operations, I&T and technical services to civil and defense customers primarily in the aerospace fields.

Lentech, Inc. is a performance-based company providing team members with challenging and interesting work, competitive pay, and comprehensive benefits such as healthcare, wellness, financial and retirement programs, family support, continuing education, and time off benefits. As an Employee Stock Ownership Plan (ESOP) company, our employees have an ownership stake in the organization and share in its long-term success. We focus on providing an environment of fun, sharing, collaboration, and connection. Our culture is team-oriented, non-hierarchical, and entrepreneurial, giving people a chance to participate and be a meaningful factor in the company’s growth and success.

Lentech, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, protected veteran status, or any other characteristic protected by applicable law.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our team members value the flexibility at Lentech that allows them to balance quality work and their personal lives.The range shownbelowis the national average for the position.

The proposed salary range for this position is:$125,000.00-$162,000.00