Security Lead/ISSO

Lentech Inc.•Elkridge, MD

1d•$125,000 - $162,000

About The Position

Lentech is seeking a high-Performance, multi-disciplinary team to lead a technical implementation of a Microsoft Dynamics 365 and Power Platform-based case management system (CMS). This mission-critical project and CMS supports legal services to children in support of the U.S. Government. U.S. Citizenship is required along with the ability to positively pass a public trust background investigation. The primary implementation timeline occurs across the first 180 days of the project and moves into steady state operations for the remainder of the first year. A five-year follow-on contract is expected based on positive performance in the first year. The implementation follows an aggressive timeline divided into four key phases: Mobilization, Core Operations, Fully Functional Delivery, and Steady-state Operations. This effort demands a collaborative team capable of maintaining operational continuity throughout the transition and into operations. You will be working with a primary legal team providing the CMS to the lawyers working each individual case. Candidates must be prepared to handle high-velocity delivery, strict data privilege boundaries, and the technical rigor required to support vulnerable populations. Role Overview: The Security Lead/ISSO is a critical position for working towards an ATO during the implementation period. This role ensures that security and privacy are treated as active implementation workstreams and release criteria rather than end-of-project documentation tasks. The lead is responsible for the overall security architecture, ensuring all security documents are created, producing all mandatory compliance artifacts, and establishing the tested protocols for incident response.

Requirements

Deep experience with NIST SP 800-53 controls and the security standards required for Government Community Cloud (GCC) environments.
Understanding of FedRAMP inheritance and full compliance using a CSP provided Customer Responsibility Matrix (CRM)
Expert knowledge of MS Dynamics 365/Power Platform security boundaries, including role-based access, field-level security, and organization-scoped data isolation.
Background in handling Controlled Unclassified Information (CUI) and maintaining the privilege boundary between program data and attorney work product.
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
Experience-based certifications in FedRAMP or NIST-aligned federal security auditing.
U.S. Citizenship is required.
Ability to positively pass a public trust background investigation.

Responsibilities

Lead the development of a comprehensive artifact package, including the System Security Plan (SSP), FIPS 199 categorization, e-Authentication Risk Assessment, Business Impact Analysis (BIA), and the system contingency plan.
Establish and manage the mandatory incident notification path and support the formal government reporting process.
Implement "default-deny" access boundaries for attorney work product, manage organization isolation for external providers, and conduct monthly account and access reviews with retained evidence.
Integrate privacy-by-design requirements into the data model, including data minimization, PII review protocols, and ensuring no Social Security Numbers are stored by design.
Maintain the Plan of Action and Milestones (POA&M) for open findings and provide the objective evidence required to support independent assessments and Government connection readiness.
Participate in the Change Control Board (CCB) to review and approve all security-relevant and baseline changes.
Implement and test backup, recovery, and reconstitution procedures based on Organization-approved RTO (Recovery Time Objective) and RPO (Recovery Point Objective) values.