Senior ISSO for DoD RMF & Cross‑Domain Security

Sawdey Solution Services, Inc.; Fairborn (OH); Hybrid; USD 110,000 - 165,000; Full time

Job summary

Sawdey Solution Services, Inc. is seeking a Cybersecurity/ISSO to support Cross Domain Solutions and RMF activities for classified and cross-domain environments at the Secret level and below.

The role involves developing RMF artifacts, conducting vulnerability assessments, and coordinating IATT/ATO processes in collaboration with ISSM, AO, and system stakeholders. Candidates should possess DoD 8570 IAT II/III certifications (Security+ CE, SSCP, GSEC, CISSP, CISA, CASP) and experience with RMF

Qualifications

• Experience performing ISSO, cybersecurity, information assurance, or RMF support duties.
• Working knowledge of DoDI 8510.01, AFI 17-101, AFRL guidance, and RMF procedures.
• Proficiency with RMF artifacts including SSPs, SARs, POA&Ms, and security control documentation.
• Familiarity with RMF workflow tools (eMASS, Xacta) and vulnerability scanning (ACAS, STIGs).
• Ability to communicate security findings to technical and nontechnical stakeholders.

Responsibilities

• Serve as ISSO for one or more information systems, networks, or CDS environments including classified and SCI environments where assigned.
• Support RMF documentation, assessment, and testing of security controls.
• Develop and maintain RMF artifacts (SSPs, SARs, POA&Ms, network diagrams).
• Coordinate vulnerability scans, ACAS reviews, and STIG assessments; track remediation and POA&M milestones.
• Assist with IATT/ATO processes and continuous monitoring; liaise with ISSM, AO and system owners.

Skills

RMF process

RMF artifacts

IATT/ATO

Cross-domain solutions

DoD guidance

Security assessment

POA&Ms

eMASS

Xacta

ACAS

STIGs

CM tooling

Tools

eMASS

Xacta

DISA STIGs

ACAS

Job description

Sawdey Solution Services, Inc. is seeking a Cybersecurity/ISSO to support Cross Domain Solutions and RMF activities for classified and cross-domain environments at the Secret level and below.

The role involves developing RMF artifacts, conducting vulnerability assessments, and coordinating IATT/ATO processes in collaboration with ISSM, AO, and system stakeholders. Candidates should possess DoD 8570 IAT II/III certifications (Security+ CE, SSCP, GSEC, CISSP, CISA, CASP) and experience with RMF