Senior ISSO & Controls Evaluator RMF Expert

Koniag Services, Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401K with company match

Paid holidays

3 weeks paid time off

Job summary

Koniag Government Services in Washington, DC, seeks an experienced ISSO / Control Evaluator to support a federal civilian agency. The role requires a Moderate Risk background investigation and involves developing security documentation, mapping controls, and maintaining ATOs across on-prem, cloud, and hybrid environments.

You will work within the Information Security Division, perform controls assessments, assist OA activities, support FISMA metrics, and contribute to automation and dashboards

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• 5+ years of information security experience including ISSO or security control assessment roles.
• Experience developing SSPs/SAPs/SARs/POAMs for federal environments.
• Hands-on with GRC tooling and RMF artifacts.

Responsibilities

• Develop, maintain, and organize cybersecurity and privacy documentation for all assigned systems, aligned to agency templates.
• Conduct security controls assessments across Windows, UNIX/Linux, network devices, and cloud platforms.
• Support Ongoing Authorization (OA) activities, including playbooks and positive/negative testing.
• Assist FISMA reporting through data collection and visualization of metrics.
• Support internal/external audits (IG/GAO) with artifact preparation and responses.
• Maintain HVA inventories and remediation tracking, coordinating with CSPs as needed.

Skills

NIST RMF

GRC tools

SSP/SAP/SAR/POAM

NIST SP 800-53A

Audit support

Education

Bachelor's degree in Cybersecurity or related field

Tools

Tenable Nessus/Security Center

Microsoft Sentinel

Power BI

PowerShell

KQL (Kusto)

Job description

Koniag Government Services in Washington, DC, seeks an experienced ISSO / Control Evaluator to support a federal civilian agency. The role requires a Moderate Risk background investigation and involves developing security documentation, mapping controls, and maintaining ATOs across on-prem, cloud, and hybrid environments.

You will work within the Information Security Division, perform controls assessments, assist OA activities, support FISMA metrics, and contribute to automation and dashboards