Senior ISSO (TS/SCI CI Polygraph)

Zachary Piper Solutions; Washington (District of Columbia); Hybrid; USD 155,000 - 200,000; Full time

Benefits offered by this job

PTO

Paid holidays

Medical coverage

Dental coverage

Vision coverage

401k

Job summary

Zachary Piper Solutions is seeking a Senior Information Systems Security Officer to support a DoD Intelligence agency data migration project from multiple locations. Hybrid work 3x per week onsite, with TS/SCI CI Polygraph clearance required.

The Sr ISSO will drive RMF lifecycle activities, manage ATO/IATT, and maintain SSPs/POA&Ms. Strong experience with NIST 800-53 controls, XACTA, and zero-trust architecture is essential.

Qualifications

• Active TS/SCI w/ CI Polygraph clearance is required.
• Bachelor's degree and 15+ years of information security experience.
• IAT II certification (Security+ CE or higher) required.
• Experience using XACTA for governance and compliance.
• Familiar with RMF steps 1-7 and ATO/IATT processes.
• Experience developing SSPs, POA&Ms, SAPs; Zero-trust knowledge.

Responsibilities

• Conduct security compliance assessments and RMF activities.
• Manage ATO/IATT processes and accreditation efforts.
• Maintain SSPs, POA&Ms, and XACTA documentation.
• Partner with cross-functional teams to ensure compliance.
• Implement and assess NIST 800-53 security controls.
• Support audits, assessments, and remediation activities.
• Apply Zero Trust principles across cloud environments.
• Monitor security posture and mitigate risk.

Skills

TS/SCI w/ CI Polygraph

15+ years cyber security

RMF lifecycle

ATO/IATT processes

NIST 800-53 controls

Zero trust architecture

Education

Bachelor's degree

Tools

XACTA

Job description

Zachary Piper Solutions is seeking a Senior Information Systems Security Officer to support a critical data migration project for a DoD Intelligence agency out of various locations. The team is seeking an individual with extensive expertise managing accredidation and security control assessments through the RMF lifecycle in complex enterprise environments. Details below:

Clearance: TS/SCI CI Polygraph

Location: Reston, VA, Washington, D.C., Annapolis Junction, MD (Hybrid 3x/ week onsite)

This job opens for applications on 10/21/2026 Applications for this job will be accepted for at least 30 days from the posting date

Responsibilities of the Sr ISSO:

• Conduct security compliance assessments and RMF activities.
• Manage ATO/IATT processes and accreditation efforts.
• Maintain SSPs, POA&Ms, and XACTA documentation.
• Partner with cross-functional teams to ensure compliance.
• Implement and assess NIST 800-53 security controls.
• Support audits, assessments, and remediation activities.
• Apply Zero Trust principles across cloud environments.
• Monitor security posture and mitigate risk.

Qualifications of the Sr. ISSO:

• Active TS/SCI w/ CI Polygraph Clearance
• Bachelors degree and 15+ years of experience in cyber security or Information Security
• IAT II certification (Security+CE or higher)
• Experience using Xacta for cyber governance and compliance
• Experience with steps 1-7 of the Risk Management Framework supporting ATO/IATT
• Experience developing security documentation including SSPs, POA&Ms, SAPs
• Experience working with Zero-trust architecture

Compensation of the Sr. ISSO:

• Total compensation based on experience level - $155,000-$200,000 (based on total years of experience and degree)
• Full Benefits: PTO, Paid Holidays, Medical, Dental, and Vision, 401k
• Long-term contract through Zachary Piper Solutions - contract mobility and job stability
• Hybrid work

Keywords: Risk Management Framework (RMF), NIST SP 800-53, Information System Security Officer (ISSO), cybersecurity compliance, security controls assessment, Authorization to Operate (ATO), Continuous Monitoring (ConMon), POA&Ms management, security authorization, system accreditation, vulnerability management, risk assessment, security documentation, eMASS, FISMA, FedRAMP, CMMC, NIST Cybersecurity Framework (CSF), zero trust, ci polygraph, ts/sci, top secret/sci, cloud, aws, azure, gcp, W2, federal, onsite, top secret, security clearance, opentowork, hiring, DoD, Defense, Intelligence, security control implementation, audit readiness, compliance monitoring, incident response, cybersecurity governance, configuration management, change management, security engineering, security architecture, access control, identity and access management (IAM), privileged access management (PAM), security awareness training, contingency planning, disaster recovery, business continuity, vulnerability scanning, STIG compliance, SCAP, ACAS, Nessus, Tenable, Splunk, SIEM, endpoint security, cloud security, Azure Government, AWS GovCloud, Microsoft 365 security, data protection, encryption, security policies and procedures, third-party risk management, supply chain security, threat analysis, security reporting, authorization packages, stakeholder engagement, cross-functional collaboration, federal information systems, governance, risk, and compliance (GRC), cybersecurity strategy, security operations, control inheritance, remediation tracking, executive briefings, security assessments