Senior ISSM (TS/SCI) RMF Expert for DoD/IC Systems

Galapagos Federal Systems

Colorado Springs (CO)

On-site

USD 170,000 - 180,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

Flexible Spending Accounts

401(k)

PTO

Paid Parental Leave

Military Differential

Tuition reimbursement

Paid federal holidays

Job summary

Galapagos Federal Systems LLC is seeking an Information Systems Security Manager (ISSM) SME Level 4 to support US Space Force cybersecurity operations. The ISSM will provide senior-level expertise for classified systems, supporting RMF activities and documentation, and coordinating with government stakeholders.

The ideal candidate has 15+ years of DoD/IC IA experience, TS/SCI eligibility, and strong knowledge of NIST SP 800-53 and JSIG.

Qualifications

Bachelor’s degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from ABET-designated institutions.
One or more of the following (required) Security+, CCSP, CGRC/CAP, CASP+, Cloud+, SSCP, GSEC—or equivalent military training/certification.
One or more of the following (desired) CISM, CISSO, CISSP, CISSP-ISSMP, GCIA, GCSA, GSLC, CGIH, or FITSP-M—or equivalent military training/certification.

Responsibilities

Provide senior-level cybersecurity and IA support for classified systems and networks per DoD/IC requirements.
Manage cybersecurity activities throughout the system lifecycle to protect confidential data and resources.
Lead RMF activities including A&A, ATO, IATT, and continuous ATO requirements.
Develop, maintain, and manage RMF documentation (SSPs, SCTMs, POA&Ms).
Apply cybersecurity controls per NIST, JSIG, DoD, DAF, and IC guidance.
Manage IA requirements for new and existing classified networks and government networks.
Identify cybersecurity risks and develop mitigation strategies.
Develop and execute cybersecurity test plans and procedures.
Coordinate activities with AOs, SCAs, configuration managers, and system owners.
Prepare and present cybersecurity briefings and technical documentation to government leadership.
Research cybersecurity policies to ensure continued compliance.
Support information security education and awareness programs.