Senior ISSO: Cloud Security & RMF Expert

Guidehouse; Springfield (VA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical coverage

Parental Leave

Retirement plan

Tuition reimbursement

Learning opportunities

Employee referrals

Job summary

Guidehouse is seeking a highly experienced Information Security Systems Officer (ISSO) to support a major federal initiative. The ISSO guides system owners, engineers, and security teams through RMF, ATO, and continuous monitoring, ensuring compliance with NIST controls and agency governance.

The role requires a TS/SCI clearance, US citizenship, and leadership of cross-functional teams, including cloud architecture design and secure CI/CD practices in hybrid environments.

Qualifications

• Bachelor’s degree required; 5+ years in cybersecurity or secure systems engineering with cloud architecture.
• Active TS/SCI clearance with CI or FS/polygraph; US citizenship required.
• Strong knowledge of NIST RMF 800-53 Rev 5, DoD 8570; ability to lead audits and compliance.

Responsibilities

• Lead design and engineering of secure cloud architectures across AWS, Azure, and hybrid environments.
• Implement and validate NIST 800-53 controls and cloud-native security services (IAM, encryption, logging).
• Conduct cloud threat modeling, risk assessments, and architecture reviews.
• Oversee cloud configuration baselines using STIGs, CIS Benchmarks, and SCAP.
• Drive cloud vulnerability and compliance with ACAS/Nessus and security posture tools.
• Support RMF engineering activities including boundary definition and authorization packages.

Skills

Security architecture

RMF/ASD guidance

Cloud security

Leadership

Communication

Education

Bachelor’s degree

Master’s degree

Tools

Splunk

Nessus

CrowdStrike

STIGs/CIS Benchmarks

Job description

Guidehouse is seeking a highly experienced Information Security Systems Officer (ISSO) to support a major federal initiative. The ISSO guides system owners, engineers, and security teams through RMF, ATO, and continuous monitoring, ensuring compliance with NIST controls and agency governance.

The role requires a TS/SCI clearance, US citizenship, and leadership of cross-functional teams, including cloud architecture design and secure CI/CD practices in hybrid environments.