Senior ISSO: Remote RMF/ATO Expert for Cloud Systems

Quantum Sky; Washington (District of Columbia); Remote; USD 125,000 - 135,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking a Senior ISSO Support to oversee information assurance for a large FedGov IT infrastructure in Washington DC, focusing on RMF, ATO, and security controls across IaaS, PaaS, and SaaS. You will craft SSPs, coordinate with risk teams, and drive security improvements in a cloud-first environment.

The role requires 8+ years in security, 6+ years as ISSO or security controls analyst, and secret clearance to start.

Qualifications

• Bachelor’s Degree or equivalent; 6+ years of relevant experience accepted in lieu of degree.
• Minimum 8 years general experience and 6 years as ISSO or Security Controls Analyst.
• Experience with NIST RMF, audit logs, continuous monitoring, and security policies.
• Cloud experience with AWS or Azure; FedRAMP knowledge desired.
• Strong written/oral communication and ability to manage tasks and stakeholders.

Responsibilities

• Develop and update SSPs and security artifacts for RMF/A&A reviews.
• Coordinate with security teams to ensure Authority to Operate (ATO).
• Perform risk analyses and recommend cost-effective safeguards.
• Analyze scans of applications, networks, and databases for weaknesses.
• Lead data calls and collaborate with multiple stakeholders on security deliverables.

Skills

RMF Knowledge

NIST 800-53A

Vulnerability Assessment

Security Documentation

Cloud Security

Strong Communication

Project Management

Security Policy Understanding

Education

Bachelor’s Degree in a related field

Tools

AWS

Azure

FISMA

NIST RMF tooling

Job description

Quantum Sky is seeking a Senior ISSO Support to oversee information assurance for a large FedGov IT infrastructure in Washington DC, focusing on RMF, ATO, and security controls across IaaS, PaaS, and SaaS. You will craft SSPs, coordinate with risk teams, and drive security improvements in a cloud-first environment.

The role requires 8+ years in security, 6+ years as ISSO or security controls analyst, and secret clearance to start.