Senior ISSO - PQC & RMF Security Leader

Lumen; Augusta (ME); Remote; USD 106,000 - 155,000; Full time

Benefits offered by this job

Health benefits

Life benefits

Voluntary Lifestyle benefits

Job summary

Lumen is seeking a Lead Information Security Engineer (ISSO) with deep RMF expertise and a focus on Post-Quantum Cryptography, to serve as the security authority for assigned systems and enable successful ATO outcomes.

This remote role supports federal and regulated environments across the U.S., requiring collaboration with engineering and program teams to drive remediation, PQC readiness, and secure cryptographic modernization.

Qualifications

• Bachelor’s degree in Cybersecurity or related field or equivalent experience.
• 5+ years in cybersecurity governance, risk, and compliance including RMF.
• Proficient with NIST RMF (SP 800-37) and SP 800-53, FedRAMP, FISMA.
• Experience evaluating PKI, encryption, key management, and certificates.
• Understanding Post-Quantum Cryptography and quantum threats.
• Experience producing SSPs, POA&Ms, and continuous monitoring docs.
• Strong communication to explain security to technical and non-technical audiences.

Responsibilities

• Serve as the primary ISSO for RMF execution and ATO support.
• Lead PQC integration within customer environments per federal guidance.
• Manage full RMF lifecycle: categorization, controls, assessment, authorization, monitoring.
• Create and maintain SSPs, POA&Ms, cryptographic inventories, evidence.
• Assess cryptographic architectures and PKI risks, legacy systems.
• Plan crypto modernization: crypto agility, PQC migrations.
• Collaborate with engineering and operations to remediate findings.

Skills

RMF execution

PQC strategy

NIST RMF

FedRAMP/FISMA

Crypto inventories

SSP/POAM

Communication

Education

Bachelor's degree in Cybersecurity or related

Tools

Security assessment tooling

Job description

Lumen is seeking a Lead Information Security Engineer (ISSO) with deep RMF expertise and a focus on Post-Quantum Cryptography, to serve as the security authority for assigned systems and enable successful ATO outcomes.

This remote role supports federal and regulated environments across the U.S., requiring collaboration with engineering and program teams to drive remediation, PQC readiness, and secure cryptographic modernization.