Senior ISSO: RMF, FedRAMP & Cloud Security Lead

C3EL; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

C3EL is seeking a Senior Information System Security Officer (ISSO) to provide on-site cybersecurity and RMF sustainment support in Washington, D.C., for a new contract. The role serves as the primary Alternate Lead with deep CSAM, RMF, authorization, FedRAMP, cloud, identity, and assessment expertise, capable of assuming Lead ISSO duties without service degradation.

The candidate should have at least seven years in cybersecurity, five in RMF/A&A/ISSO, and hands-on experience with Azure

Qualifications

• Minimum seven (7) years of cybersecurity experience.
• Minimum five (5) years in federal RMF, A&A, ISSO, or authorization work.
• Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable guidance.
• Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint and cloud-security platforms.
• Hands-on CSAM experience supporting system profiles, controls, evidence, POA&Ms, and authorization workflows.
• Experience with Azure Government, Microsoft 365 GCC/GCC High, and cloud shared-responsibility models.
• Experience with Entra ID, Okta, privileged access, role assignments, and access recertification.

Responsibilities

• Provide on-site cybersecurity and RMF sustainment support.
• Independently manage categorization, control selection, implementation evidence, assessment readiness, authorization, and monitoring.
• Develop and maintain SSPs, SAPs, SARs, POA&Ms, risk assessments, control statements, inheritance records, and evidence packages.
• Support FedRAMP-authorized cloud services, provider artifacts, customer responsibilities, CRMs, SRMs, and inherited controls.
• Support privacy controls, PTAs, PIAs, and systems processing PII.
• Pre-stage evidence and coordinate interviews, walkthroughs, findings, and adjudication.
• Track ATO dates, conditions, milestones, open risks, and briefing materials for AO/AODR decisions.
• Produce audit-ready Government cybersecurity documentation.
• Support team coverage from 7:00 a.m. to 6:00 p.m. ET and after-hours incident coverage as needed.

Skills

RMF

A&A

FedRAMP

Cloud security

Identity management

Assessment

GRC

SIEM

Privileged access management

Education

Associate’s degree in Cybersecurity, Information Technology, or related field

Tools

Azure Government

Microsoft 365 GCC/GCC High

Entra ID

Okta

Job description

C3EL is seeking a Senior Information System Security Officer (ISSO) to provide on-site cybersecurity and RMF sustainment support in Washington, D.C., for a new contract. The role serves as the primary Alternate Lead with deep CSAM, RMF, authorization, FedRAMP, cloud, identity, and assessment expertise, capable of assuming Lead ISSO duties without service degradation.

The candidate should have at least seven years in cybersecurity, five in RMF/A&A/ISSO, and hands-on experience with Azure