Senior Cloud ISSO: RMF Lead & Zero Trust Architect

Kids for the Future; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

PTO immediately based on experience

401K match

Pet Insurance

Tuition & Development Funds

Charitable Donations Program

Job summary

Gray Analytics is seeking a Senior Cloud ISSO/Senior Cloud Security Engineer to design, secure, and sustain enterprise cloud environments for a Federal Government customer. You will lead RMF activities, cloud security engineering, continuous monitoring, and accreditation support across hybrid and cloud-hosted systems.

This role requires extensive federal cybersecurity experience, cloud security expertise, and the ability to mentor junior staff while coordinating with government officials and

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related discipline.
• 10+ years of information assurance, cybersecurity, or cloud security experience.
• Minimum of 5 years supporting Federal Government RMF programs.
• Experience securing cloud-hosted environments (AWS, Azure, or Azure Government).
• Security+
• Extensive knowledge of:NIST 800-37;NIST 800-53 Rev. 5;FISMA;FedRAMP;Zero Trust principles;Security engineering best practices.
• Experience with SIEM technologies, vulnerability management platforms, endpoint protection, and cloud-native security tools.
• Strong experience with POA&M management and continuous monitoring.
• Excellent written and verbal communication skills.
• Current DoJ Clearance.

Responsibilities

• Serve as the senior cybersecurity advisor supporting government cloud initiatives.
• Lead RMF implementation throughout the system lifecycle in accordance with NIST SP 800-37.
• Develop and maintain SSPs, SARs, POA&Ms, Contingency Plans, and related RMF artifacts.
• Design and implement secure cloud architectures within AWS, Azure, or Azure Government environments.
• Develop security architectures aligned with Zero Trust, FedRAMP, DoD Cloud Computing SRG, and CISA guidance.
• Lead vulnerability identification, risk analysis, and mitigation activities.
• Coordinate security assessments, penetration testing, and authorization activities with government officials.
• Manage continuous monitoring programs and oversee vulnerability remediation efforts.
• Review security event data from SIEM platforms and coordinate incident response activities.
• Provide cybersecurity guidance to system administrators, cloud engineers, developers, and DevSecOps teams.
• Support audits and inspections from internal and external organizations.
• Mentor junior ISSOs and cybersecurity personnel.
• Prepare executive-level cybersecurity briefings, status reports, and recommendations.

Skills

RMF

Cloud security

NIST 800-37

NIST 800-53 Rev.5

FedRAMP

Zero Trust

SIEM

Vulnerability management

DoD Cloud Security

Security+

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related discipline

Security+ (certification)

Tools

AWS

Azure

Azure Government

SIEM platforms

Job description

Gray Analytics is seeking a Senior Cloud ISSO/Senior Cloud Security Engineer to design, secure, and sustain enterprise cloud environments for a Federal Government customer. You will lead RMF activities, cloud security engineering, continuous monitoring, and accreditation support across hybrid and cloud-hosted systems.

This role requires extensive federal cybersecurity experience, cloud security expertise, and the ability to mentor junior staff while coordinating with government officials and