Senior Cloud ISSO – Federal RMF Security & Compliance

3M HEALTHCARE; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

SMX is seeking a highly skilled Information Systems Security Officer (ISSO) – Sr (Cloud) to support a mission‑critical federal program in Huntsville, AL. This role requires supporting the security posture and compliance activities for enterprise cloud environments in a classified setting.

Selected candidates will work closely with engineering, cloud, infrastructure, and government stakeholders to ensure systems remain compliant with federal cybersecurity requirements while supporting mission

Qualifications

• Minimum 9 years of cybersecurity, information assurance, or information systems security experience.
• 7+ years as an ISSO in a cleared federal environment.
• Active TS clearance required, SCI Eligible.
• Cloud security certifications from AWS, Azure, or GCP.
• Knowledge of RMF, NIST, and federal cybersecurity standards.

Responsibilities

• Serve as primary ISSO for cloud-hosted and enterprise information systems in classified environments.
• Support RMF/ATO processes and continuous monitoring.
• Maintain SSPs, POA&Ms, and security control assessments.
• Coordinate ATO package development and annual security reviews.
• Perform vulnerability analysis and security reporting with enterprise tools.

Skills

SQL proficiency

TS clearance

9+ years cybersecurity

7+ years ISSO experience

Cloud security certifications

NIST RMF & ATO knowledge

Security tools (Splunk, Nessus, Guardi

Education

B.S. in CS/IT or related

Advanced degree preferred

Tools

Splunk

Tenable Nessus

IBM Guardium

HP WebInspect

Security Center

NMAP

Job description

SMX is seeking a highly skilled Information Systems Security Officer (ISSO) – Sr (Cloud) to support a mission‑critical federal program in Huntsville, AL. This role requires supporting the security posture and compliance activities for enterprise cloud environments in a classified setting.

Selected candidates will work closely with engineering, cloud, infrastructure, and government stakeholders to ensure systems remain compliant with federal cybersecurity requirements while supporting mission