Senior ISSO: RMF and ATO Lead for Classified Systems

EITACIES Inc.; Reston (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

EITACIES Inc. seeks an Information System Security Officer (ISSO) to manage RMF governance for classified systems within a SCIF in Reston, VA. You will own the Authorization to Operate lifecycle and develop SSPs and RMF artifacts.

Collaborating with agency infrastructure, platform, and application teams, you will enforce ICD guidance, oversee continuous monitoring, address control gaps, and ensure audit readiness while maintaining segregation of duties in a highly regulated environment.

Qualifications

• Active TS/SCI with Full Scope Polygraph.
• Completion of an IC ISSO training program (or equivalent).
• Strong experience with NIST RMF and ATO lifecycle management.
• Experience developing and maintaining SSPs and security authorization packages.
• Working knowledge of ICD 503, ICD 704, ICD 705.
• Experience operating in classified or SCIF environments.
• Strong understanding of NIST 800-53 security controls and assessment processes.
• Ability to work independently in a highly regulated environment.
• Strong documentation, communication, and audit readiness skills.

Responsibilities

• Own the Authorization to Operate (ATO) lifecycle for classified systems
• Develop and maintain System Security Plans (SSPs) and RMF documentation
• Lead security assessments, authorization decisions, and reauthorization activities
• Ensure alignment with NIST 800-53 control requirements
• Operate continuous monitoring (ConMon) programs for in-scope systems
• Track and manage vulnerabilities, control gaps, and remediation activities
• Ensure timely resolution of findings impacting system authorization status
• Enforce segregation of duties between system administration and security authorization
• Validate that system changes are properly reviewed, approved, and documented
• Maintain oversight of privileged access and security-relevant system modifications
• Partner with Agency infrastructure, platform, and application teams on secure system design and operation
• Provide security requirements during system deployment and change activities
• Support remediation of audit findings and control deficiencies

Skills

Documentation

Communication

Audit readiness

Independent work

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field

Tools

RMF

NIST 800-53

SSP development

ConMon tooling

Job description

EITACIES Inc. seeks an Information System Security Officer (ISSO) to manage RMF governance for classified systems within a SCIF in Reston, VA. You will own the Authorization to Operate lifecycle and develop SSPs and RMF artifacts.

Collaborating with agency infrastructure, platform, and application teams, you will enforce ICD guidance, oversee continuous monitoring, address control gaps, and ensure audit readiness while maintaining segregation of duties in a highly regulated environment.