Senior ISSO – Cloud Security & RMF Expert

SupportFinity™; Washington; On-site; USD 110,000 - 145,000; Full time

Job summary

Spry Methods, Inc. seeks an Information System Security Officer (ISSO) in Washington to safeguard mission-critical applications and infrastructure across network enclaves.

You will develop and enforce security policies, implement controls, manage ATO documentation, and perform continuous monitoring in line with FISMA, NIST, DOJ, and related mandates. The role requires TS clearance with SCI eligibility, 3–5 years of federal cybersecurity experience, and hands-on work with cloud security,

Qualifications

• Top Secret clearance with SCI eligibility.
• 3–5 years of federal cybersecurity experience.
• Experience with RMF, NIST 800-53, CNSS, FISMA.
• Cloud security experience in AWS GovCloud, C2S, SC2S and Azure.
• Experience with Nessus, ACSA, Splunk.
• At least one security certification (e.g., CISSP, Security+).

Responsibilities

• Serve as principal cybersecurity advisor to system owners.
• Design, analyze, and test information security systems and cloud architectures.
• Develop and enforce security controls and policies.
• Manage Authority to Operate (ATO) documentation.
• Conduct risk assessments and audits in cloud environments.
• Coordinate with OCIO and Security Division on Certification and Accreditation.
• Perform continuous system security monitoring.
• Draft and maintain System Security Plan and POA&M.

Skills

Security controls

Risk assessments

Cloud security

Splunk

Vulnerability scanning

GRC tools

Agile/SAFe

RMF/NIST

Policy development

ATO process

Tools

Nessus

ACSA

Splunk

JIRA/Confluence

Xacta/JCAM

Terraform

Ansible

Job description

Spry Methods, Inc. seeks an Information System Security Officer (ISSO) in Washington to safeguard mission-critical applications and infrastructure across network enclaves.

You will develop and enforce security policies, implement controls, manage ATO documentation, and perform continuous monitoring in line with FISMA, NIST, DOJ, and related mandates. The role requires TS clearance with SCI eligibility, 3–5 years of federal cybersecurity experience, and hands-on work with cloud security,