Isse Sme

Noetic Strategies•Alexandria, VA

4d•Onsite

About The Position

Noetic Strategies is seeking an experienced ISSE to provide leadership and guidance to the government program office developing, delivering, and achieving ATO for a new campus of high-speed and hypersonic wind tunnels and an integrated digital engineering ecosystem. The Department of War (DoW) Test Resource Management Center (TRMC) plays a critical role in ensuring our warfighters have a decisive edge. TRMC ensures that the DoW components have the appropriate test and evaluation (T&E) infrastructure required to develop and field military systems. The ideal candidate will be a cybersecurity subject matter expert with strong documentation and communication skills, personal accountability, and a desire to work as part of a collaborative team. This role is a critical part of the government's oversight team, serving as the technical lead and trusted technical advisor for a cutting-edge hypersonic T&E infrastructure project. Unlike standard enterprise IT roles, this position demands expertise at the complex intersection of traditional Enterprise IT, highly specialized Operational Technology (OT) / Industrial Control Systems (ICS), and advanced Digital Engineering Ecosystems (DEE). As the government's primary cybersecurity authority, you will provide specialized technical oversight for all contractor-led security engineering. You will ensure "secure-by-design" principles are baked into the facility from Day 1, protecting the project's critical path by driving the Risk Management Framework (RMF) process to ensure timely Authorization to Operate (ATO).

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a closely related technical discipline or Certifications in SecurityX / CASP+, CCSP, CISSO, Cloud+, CSSLP, FITSP-D, GCSA, GSEC, GMON
8+ years of progressively responsible experience in cybersecurity engineering, Information Assurance, or secure network architecture for DoW or federal systems
At least 3 years of experience functioning in a government advisory (SETA) role, providing cybersecurity oversight of contractor-executed programs
Deep, practical understanding of the DoW Risk Management Framework (RMF), NIST SP 800-53 controls, and DoW Zero Trust architecture
Demonstrated experience or strong understanding of securing Operational Technology (OT), Industrial Control Systems (ICS), or Facility-Related Control Systems (FRCS)
Proven ability to conduct comprehensive security design reviews, resolve complex technical issues (RFIs/ECPs), and oversee the ATO process from initial design through commissioning
Exceptional communication skills with a proven ability to translate complex cyber risks into decision-ready briefings for high-level technical and non-technical stakeholders
Proven tactical project management skills with a demonstrated ability to drive accountability, manage action plans, and maintain project momentum
Proficiency in Microsoft Office 365 suite of software
Must possess an active TOP SECRET security clearance

Nice To Haves

Experience securing Digital Engineering Ecosystems (DEE), Digital Twins, or advanced Modeling & Simulation (M&S) environments
Familiarity with cloud security architectures (e.g., AWS GovCloud, Azure Government) and DevSecOps pipelines
Understanding of the unique security challenges associated with large-scale aerodynamic or aerospace testing facilities
Familiarity with the application of Generative AI or machine learning in cybersecurity threat detection or risk analysis

Responsibilities

Serve as the government program office's lead cybersecurity advisor to the Contracting Officer Representative (COR), overseeing the design-build prime contractor's design, development, and execution of the campus' Information Assurance (IA) and cybersecurity architecture.
Serve as the authoritative oversight Point of Contact (POC), providing critical feedback and strategic guidance to the contractor to ensure that the design and execution achieve government security and performance objectives.
Drive the ATO process, serving as the primary liaison between the program office, the executing design-build contractor, and the Authorizing Official (AO) to ensure timely accreditation of all physical and digital systems.
Drive contractor accountability by rigorously tracking cybersecurity deliverables, managing security-related action items to closure, and ensuring strict compliance with DoW Zero Trust strategies and the full federal acquisition lifecycle.
Conduct detailed technical reviews of contractor-developed security architectures, validating alignment with the DoW Risk Management Framework (RMF) across IT, OT, and physical facility integration.
Direct the government's review of all cybersecurity deliverables, serving as the authoritative voice on System Security Plans (SSPs), Threat Models, continuous monitoring plans, and incident response procedures.
Advise on multi-classification network integration, evaluating contractor proposals for securely connecting the digital ecosystem and physical sensors across required security domains (e.g., NIPR, SIPR, JWICS).
Own and manage cyber-related risk, proactively identifying vulnerabilities in the contractor's proposed designs and developing mitigation plans to protect both the facility's control systems and the highly classified test data it generates.
Evaluate contractor technical findings by performing independent verification analyses of their security controls and coordinating with internal/external SMEs to assess risk and inform government decisions.
Represent the government program office in all technical forums, including contractor-chaired IPTs, TIMs, and milestone design reviews, communicating government security questions, concerns, and requirements.
Collaborate seamlessly within a highly matrixed team of mechanical, electrical, aerothermal, and systems engineers, ensuring cybersecurity is integrated into the physical facility and the digital twin (M&S) environments.
Translate complex project data into decision-ready insights; lead executive briefings to present technical summaries, risk assessments, and recommendations to support government action and decisions.
Adhere to, and review internal and external work products for adherence to administrative and sensitive data protection guidelines.