Senior ISSO – RMF, DevSecOps & ATOs (On-site Boulder)

careers-isystechnologies; Boulder (CO); On-site; USD 120,000 - 180,000; Full time

Job summary

I2X Technologies is seeking an ISSO to support a customer in Boulder, CO. This on-site role requires an active TS/SCI clearance and a strong background in RMF, DoD cybersecurity, and accreditation activities.

You will work with the Government ISSM/ISSO teams to develop, maintain, and submit RMF artifacts in eMASS and XACTA, implement NIST 800-53 controls, and support continuous monitoring, vulnerability management, and secure software development lifecycle practices.

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, or a related field.
• CompTIA Security+ certification.
• Minimum of 5 years of RMF experience with DoD or IC systems, including ATO packages and continuous monitoring.
• Experience using eMASS and/or XACTA, ACAS, vulnerability scanning tools, and implementing NIST 800-53 controls in classified environments.
• Experience supporting Secret and/or TS/SCI systems in secure facilities and multiple enclaves; handling CUI/classified data.

Responsibilities

• RMF artifacts development, maintenance, and submission in eMASS and XACTA (SSPs, SARs, POA&Ms, CMPs, contingency plans).
• Assist Government ISSM/ISSO with assessment, authorization, and continuous monitoring per DoDI 8510.01 and NIST 800-series guidance.
• Conduct/coordinate continuous monitoring activities, SCAP/compliance, and remediation tracking within timelines.
• Ensure cybersecurity controls are integrated into DevSecOps pipelines and S-SDLC, including STIG compliance.
• Support cloud and hybrid-cloud security implementations, including FedRAMP-aligned controls.

Skills

RMF Experience

eMASS/XACTA

NIST 800-53

Secret/TS/SCI handling

Security Engineering

Education

Bachelor’s degree in Information Systems or Cybersecurity

Tools

eMASS

XACTA

ACAS

Vulnerability Scanning Tools

Job description

I2X Technologies is seeking an ISSO to support a customer in Boulder, CO. This on-site role requires an active TS/SCI clearance and a strong background in RMF, DoD cybersecurity, and accreditation activities.

You will work with the Government ISSM/ISSO teams to develop, maintain, and submit RMF artifacts in eMASS and XACTA, implement NIST 800-53 controls, and support continuous monitoring, vulnerability management, and secure software development lifecycle practices.