Senior ISSO: Federal Security Authorization & RMF Expert

Jobtailor; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor is seeking a seasoned cybersecurity professional in Washington DC to support the security authorization lifecycle and continuous monitoring for federal-related systems. You will develop and maintain SSPs, SARs, POA&Ms, SIAs, and related artifacts in line with NIST RMF, FISMA and agency policies.

Responsibilities include coordinating Security Control Assessments, conducting security impact analyses, reviewing architecture for control validation, and collaborating with engineers and

Qualifications

• Bachelor’s degree with 5+ years in cybersecurity or master’s with 3+ years.
• Public trust eligibility requiring U.S. Citizenship or Green Card.
• Hands-on in roles like Systems Administrator, Cloud/ Infra/ Network/ Security Engineer.
• Experience supporting federal authorization activities: SSPs, POA&Ms, SIAs.
• Knowledge of NIST RMF, NIST SP 800-53, FISMA and federal requirements.
• Familiar with AWS, Azure, Microsoft 365, AD, VMware, Cisco, Oracle; IAM concepts.
• Certifications such as Security+, CISSP, CISM, CCSP, CGRC preferred.
• Experience with government compliance programs and OWASP concepts.

Responsibilities

• Support the security authorization lifecycle and continuous monitoring.
• Develop, review, and maintain security documentation and artifacts.
• Coordinate and prepare systems for Security Control Assessments.
• Conduct Security Impact Analyses for changes to tech and architecture.
• Review architecture and evidence; validate controls and resolve discrepancies.
• Support change management, monitoring, POA&Ms, risk, audits, remediation.
• Coordinate with owners and governance to support policy and risk activities.
• Develop dashboards and risk briefings; assist Lead ISSO with coordination.

Skills

Security Documentation

Risk Management Framework

Security Impact Analysis

Technical Writing

Systems Security Engineering

Identity and Access Management

Network Security

Cloud Engineering

System Hardening

Compliance Reporting

Education

Bachelor’s degree (or higher) in cybersecurity / related field

Master’s degree in cybersecurity / related field

Tools

AWS

Azure

Microsoft 365

Active Directory

VMware

Cisco

Oracle

Archer

EMASS

Xacta

Job description

Jobtailor is seeking a seasoned cybersecurity professional in Washington DC to support the security authorization lifecycle and continuous monitoring for federal-related systems. You will develop and maintain SSPs, SARs, POA&Ms, SIAs, and related artifacts in line with NIST RMF, FISMA and agency policies.

Responsibilities include coordinating Security Control Assessments, conducting security impact analyses, reviewing architecture for control validation, and collaborating with engineers and