Senior ISSO: Cloud RMF & ATO Expert

Quantum Sky; United States; Remote; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky seeks a Senior Information System Security Officer (ISSO) to oversee information assurance for a large, complex IT infrastructure program in Washington DC. You will lead RMF and ATO activities, develop SSPs and security artifacts, and coordinate with client security teams.

The role requires extensive experience with NIST RMF, FedRAMP, and cloud security, plus strong written and verbal communication. Secret clearance is required and DC-based work is expected.

Qualifications

• Bachelor’s degree or equivalent; 8+ years’ relevant experience is acceptable.
• Minimum 10 years overall experience and 8 years ISSO/security analyst work.
• Familiarity with RMF, audit logs, monitoring, FISMA, vulnerability scanning, continuous monitoring.
• Knowledge of Cloud (AWS or Azure) and FedRAMP is highly desirable.
• Strong writing skills and ability to produce technical analysis reports.

Responsibilities

• Develop and maintain security authorization packages (SSP, risk assessments, ATO-related artifacts).
• Coordinate with client Cybersecurity Unit to achieve and maintain ATO.
• Perform risk analyses to determine essential safeguards.
• Support incident response and contingency activities.
• Conduct security control assessments per NIST 800-53A and OMB guidance.
• Perform independent scans of applications, network, and databases when required.
• Provide continuous monitoring and governance across the system owner’s processes.

Skills

NIST RMF

FISMA compliance

Cloud security AWS/Azure

FedRAMP

SSP development

Risk management

Security controls

Incident response

Communication skills

Project management

Education

Bachelor’s Degree or equivalent

Tools

Nessus

Job description

Quantum Sky seeks a Senior Information System Security Officer (ISSO) to oversee information assurance for a large, complex IT infrastructure program in Washington DC. You will lead RMF and ATO activities, develop SSPs and security artifacts, and coordinate with client security teams.

The role requires extensive experience with NIST RMF, FedRAMP, and cloud security, plus strong written and verbal communication. Secret clearance is required and DC-based work is expected.