Information Systems Security Manager (ISSM)

Aalyria • Washington, DC

5d • $165,000 - $190,000 • Hybrid

About The Position

Aalyria Technologies is seeking a highly experienced Information Systems Security Manager (ISSM) to lead the accreditation, operation, and sustained compliance of a newly established, multi-domain classified facility in Chantilly, Virginia. This is a senior individual contributor role with broad technical and programmatic responsibility across a complex, multi-network environment supporting multiple government customers at varying classification levels. The ISSM will serve as the primary interface between Aalyria and government Authorizing Officials (AOs), ISSOs, and program security personnel across multiple networks and enclaves. The selected candidate will join during the facility standup phase and will have significant influence over security architecture, policy, and procedures from the ground up. This role requires deep, hands-on familiarity with IC-specific accreditation frameworks, multi-domain network environments, and the operational discipline to build and sustain a rigorous information security program. During the facility standup phase, the ISSM will carry direct ISSO responsibilities for initial systems prior to additional security team staffing, these responsibilities will diminish as the security team grows. This is a high-trust, high-autonomy position working directly alongside the FSO. This position will begin as hybrid/remote during the facility design and pre-accreditation phase, which is anticipated to span approximately 12 months. During this period, the ISSM will conduct AO coordination, SSP development, architecture review, and policy drafting, work that does not require facility access. The ISSM will transition to full-time on-site at the Chantilly, Virginia facility upon lease execution and facility standup. Candidates must be willing and able to commit to on-site operations upon facility opening.

Requirements

• Active Top Secret clearance with SCI eligibility; must be in-scope and fully adjudicated at time of hire, no interim clearances considered.
• 10+ years of progressive information security experience, with a minimum of 5 years in an ISSM or senior ISSO role within an IC or IC-adjacent contractor environment.
• Demonstrated, hands-on experience with ICD 503 and IC-specific A&A processes, candidates with DoD RMF experience only will require supplemental evaluation against IC requirements.
• Multi-domain classified network experience including JWICS, SIPRNet, and NIPRNet; working knowledge of the accreditation and operational differences between enclaves.
• Experience managing concurrent ATO/ATC processes for multiple systems across different government authorization authorities simultaneously.
• Working familiarity with TEMPEST/EMSEC standards and their application to classified facility network infrastructure and RED/BLACK separation requirements.
• DoD 8140 / 8570 IAM Level III certification required at time of hire — CISSP, CISM, or equivalent accepted.
• Experience developing and maintaining SSPs, POA&Ms, and continuous monitoring documentation in an operational environment.
• Strong written and verbal communication skills; demonstrated ability to interface credibly with senior government security and program personnel.
• U.S. citizenship required, no exceptions.
• Active TS//SCI required at time of offer; in-scope and fully adjudicated
• SAP access eligibility required; candidates with existing SAP accesses will be prioritized.
• Counterintelligence (CI) or Full Scope Polygraph (FSP) strongly preferred; candidates holding a current polygraph will be prioritized. Candidates without an existing polygraph will be considered — this is not a disqualifier.
• A SAP briefing will be required for this role. Candidates must be eligible and willing to accept SAP accesses upon hire.
• Relevant compartment accesses above baseline TS//SCI are a significant differentiator and will be considered during the selection process.

Nice To Haves

• Prior experience within Air Force intelligence or Air Force-affiliated SCI enclave environments — direct AFSCI enclave experience is a significant differentiator.
• Existing SCI compartment accesses above baseline TS//SCI; candidates with current relevant accesses will be prioritized.
• Experience supporting SAP network accreditation, sustained operations, and direct program security officer coordination.
• Experience supporting new SCIF standup and initial accreditation under ICD 705, including pre-construction AO coordination and post-construction inspection preparation.
• Prior ISSM experience for a facility operating 4 or more concurrent classified and unclassified network environments.
• Familiarity with NRO network security requirements and approval processes.
• Experience developing operational guidance and training for users working across multiple classification levels and network environments simultaneously.
• Prior FSO, deputy FSO, or physical/personnel security experience — valuable in the context of a lean, integrated security team.
• Counterintelligence (CI) or Full Scope Polygraph (FSP) strongly preferred and will be weighted heavily in the selection process. Candidates without a current polygraph will be considered; willingness to complete one is a plus.

Responsibilities

• Lead all Assessment & Authorization (A&A) activities for multiple classified and unclassified information systems in accordance with ICD 503, RMF, and applicable IC and DoD directives.
• Develop, maintain, and submit System Security Plans (SSPs), Security Assessment Reports (SARs), and complete ATO/ATC packages across multiple network enclaves and authorization authorities.
• Manage pre-authorization coordination with government AOs and system owners; track and drive Plan of Action & Milestones (POA&M) items to resolution.
• Support physical SCIF accreditation activities and coordinate with the FSO on ICD 705 compliance and TEMPEST/EMSEC requirements during and after facility construction.
• Coordinate network connection approvals with relevant government network operations centers and accrediting authorities across all authorized enclaves.
• Design and implement continuous monitoring programs for all authorized systems; maintain situational awareness of configuration status, vulnerability posture, and compliance across the environment.
• Serve as ISSO for multiple systems during the initial facility standup phase, managing transition of responsibilities to the broader security team as it is built out.
• Conduct regular security assessments, configuration compliance reviews, and vulnerability scans; track and verify remediation to closure.
• Lead incident detection, response, reporting, and after-action remediation in coordination with the FSO and relevant government security personnel.
• Maintain all system documentation, security configuration baselines, hardware/software inventories, and change management records in compliance with applicable directives.
• Interface directly with program security officers for Special Access Program (SAP) network requirements, accreditation coordination, and sustained compliance.
• Coordinate with government network and security teams for classified network connectivity, sustainment, and issue resolution across multiple enclaves.
• Develop and deliver initial and recurring security awareness training for personnel operating in a multi-domain, multi-classification environment.
• Collaborate closely with the FSO on personnel security, physical security, and integrated facility compliance matters; serve as a force multiplier in a lean security team environment.
• Review and approve system architecture changes, new hardware/software requests, and network modifications from a security compliance perspective.
• Advise on RED/BLACK separation requirements and TEMPEST/EMSEC standards as applied to the facility's classified network and physical infrastructure.
• Develop and enforce information security policies, procedures, and standard operating procedures specific to multi-domain operations environments.
• Maintain current working knowledge of applicable IC directives, NIST standards, CNSS policies, and DoD instructions as they evolve.

Benefits

• Competitive salary
• comprehensive benefits (401(k), dental, vision, health, life insurance)
• paid time off
• equity options
• Growth Opportunities: Expand your career with opportunities for professional development and advancement.
• Inclusive Culture: Be part of a collaborative, supportive, and inclusive workplace where your contributions matter.
• Flexibility: Flexible working arrangements including hybrid remote/in-office schedules.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed