RMF / Information System Security Officer (ISSO)

Markon • Annapolis Junction, MD

6d • $120,000 - $200,000 • Onsite

About The Position

PLEX Solutions, A Part of Markon is looking for an RMF / Information System Security Officer (ISSO), to support a contract in the Annapolis Junction, MD area.

Requirements

• Active TS/SCI w/ Polygraph
• CompTIA Security+ certification
• Professional U.S. Government/DoD GRC and RMF experience
• Demonstrated ability to independently develop, maintain, and own SSPs
• Working knowledge of the DoD Risk Management Framework
• Familiarity with NIST SP 800-53 security controls
• Familiarity with DISA STIGs
• Experience preparing RMF/ATO documentation, control evidence, and assessment artifacts
• Experience supporting systems through authorization and/or continuous monitoring
• Experience working with RHEL systems
• Strong technical writing and documentation skills
• Strong customer-facing communication skills

Nice To Haves

• Experience serving as an ISSO or equivalent RMF/GRC role
• Docker, Kubernetes, or other container/container-orchestration experience is a major plus
• Experience with eMASS
• Experience developing and managing POA&Ms
• Experience with DoD authorization packages and ATOs
• Experience reviewing or implementing DISA STIG requirements
• Experience with vulnerability and compliance scanning
• Linux/RHEL system administration experience

Responsibilities

• Own and drive the RMF process for assigned systems
• Develop, maintain, and update System Security Plans (SSPs)
• Support systems through ATO, reauthorization, and continuous monitoring
• Interpret and document implementation of NIST SP 800-53 security controls
• Work with DISA STIGs, findings, remediation, and compliance documentation
• Prepare and maintain required RMF documentation and authorization artifacts
• Gather and organize control implementation evidence
• Identify documentation, control, and evidence gaps and coordinate their resolution
• Develop and maintain POA&Ms and associated remediation documentation
• Work with engineers and system administrators to understand and document technical control implementations
• Support government security reviews and assessment activities
• Communicate directly with government customers, assessors, technical teams, and other stakeholders
• Maintain authorization documentation as systems and environments change

Benefits

• Medical
• Dental
• Vision
• Life Insurance
• Short-Term Disability
• Long-Term Disability
• 401(k) match
• Flexible Spending Accounts
• EAP
• Training and Tuition Assistance
• Paid Time Off
• Holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed