Manager- Information Systems Security (ISSM)

Microchip•Boulder, CO

6d•$91,000 - $247,000

About The Position

Microchip’s Frequency and Timing Division is a world leader in precise time solutions and sets the world's standard for time. The division generates, distributes and applies precise time for the aerospace/defense, communications, IT infrastructure, and metrology industries. Microchip's customers, from communications service providers and network equipment manufacturers to governments and their suppliers worldwide, are able to build more reliable networks and systems by using the company's advanced timing technologies, atomic clocks, services, and solutions. Microchip products support today's precise timing standards, including GPS-based timing, IEEE 1588 (PTP), Network Time Protocol (NTP), and Synchronous Ethernet. Our Government Systems group in Boulder, CO is seeking an Information System Security Manager (ISSM) to provide leadership and management of our Information Assurance team. The ISSM, along with the other I/A team members, provide technical support of the design, implementation, and sustainment of cybersecurity capabilities across complex enterprise and mission systems. They work to obtain and maintain government Authority to Operate (ATO) by ensuring compliance with governing standards and frameworks, including NIST Risk Management Framework (RMF), NIST SP 800-53, ICD 503, CNSSI 1253, CMMC, NIST 800-171, and DISA STIGs. This role requires people management acumen as well as technical aptitude in Linux and Windows servers, end-user nodes, Cisco switches, and enterprise shared storage systems, while applying continuous monitoring practices to maintain compliance and strengthen mission assurance.

Requirements

Active Top Secret/SCI clearance w/ CI Poly.
US citizenship Required
Bachelor’s degree in Cybersecurity, Computer Science, or related discipline (or equivalent experience).
5+ years of experience with direct personnel management or team leadership responsibilities
10+ years of cybersecurity engineering experience with demonstrated expertise in NIST RMF and related standards.
Certification(s) applicable to Information Assurance Technician (IAT) II or Information Assurance Manager (IAM) II or higher – Security+, CISSP, etc.
Proven ability to troubleshoot and support Linux and Windows servers and endpoints, Cisco network devices, and enterprise storage systems.
Hands-on experience with compliance and monitoring tools (Tenable/ACAS, Splunk/ELK, HBSS/ESS).
Ability to perform periodic travel to both CONUS and OCONUS customer locations. Trips typically last 3-5 days and occur approximately once or twice per quarter.

Responsibilities

Team Leadership and Management
Manage a small team of Information System Security Engineers (ISSEs), including hiring, performance reviews, performance management, and resource assignments and advocacy.
Provide direction to your team on near-term priorities while supporting ongoing longer-term objective and career development.
Maintain and organize group approaches, best practices, implementation and sustainment plans.
Represent the team during internal and customer reviews, presenting team status, risks, and technical findings with clarity and accuracy.
Build productive relationships with customer leads and mission partners.
Security Engineering & Architecture
Engineer and integrate security controls into system and network architectures, including virtualized platforms, shared storage, and mission networks.
Translate NIST and CNSS security controls into technical designs and secure implementations.
Perform in a mixture of ISSM/ISSE/ISSO roles for multiple classified system, ensuring compliance with DoD and federal cybersecurity standards and frameworks.
Prepare and maintain security documentation including ATO packages, System Security Plans (SSP), Risk Assessments, and POA&Ms.
Collaborate with internal and external teams to maintain necessary security postures.
Provide advanced troubleshooting for:
Linux and Windows servers (configuration, patching, service integrity).
Linux and Windows end-user workstations/nodes (endpoint compliance and hardening).
Cisco switches and network devices (VLANs, ACLs, port security, logging).
Shared drives and enterprise file systems (permissions, access auditing, data protection).
Collaborate with administrators and engineers to resolve technical issues while maintaining compliance.
Continuous Monitoring
Implement and sustain continuous monitoring for CONMON and system-specific controls, including automated vulnerability scanning, patch compliance, and SIEM log analysis.
Correlate monitoring results across systems, assess control effectiveness, and recommend remediation strategies.
Conduct technical security assessments using Tenable, DISA STIGs, CSO Benchmarks, and related NIST guidelines.
Analyze results, prioritize risk, and lead remediation with system and network teams.