Senior Cybersecurity WAN Manager

Nooks•Arlington, TX

5d•Onsite

About The Position

Nooks is pioneering Classified-Infrastructure-as-a-Service (CIaaS) — designing, building, and operating Sensitive Compartmented Information Facilities (SCIFs) and other secured, classified environments for the defense and national security community. We work with the agencies, contractors, and mission-driven organizations that keep the nation safe, delivering the physical infrastructure that makes classified work possible. We’re growing fast, operating across multiple markets, and building a company that takes both the mission and the business seriously. The Senior Cybersecurity WAN Manager owns the scaling and delivery of Nooks' wide-area networks (WANs) and serves as the Information System Security Manager (ISSM) for them — starting with NEST, our first multi-tenant WAN. Reporting to the Director of Cybersecurity, you own the Risk Management Framework (RMF) lifecycle and the project management behind every WAN deployment, ensuring authorization packages and ATOs are completed in accordance with NIST SP 800-53, the DCSA Assessment and Authorization Process Manual (DAAPM), and DCSA requirements. This is an individual-contributor role today, but it is built to grow: as WANs scale across the network, you will stand up and lead a team of WAN ISSOs and ISSM’s. Because these are multi-tenant classified WANs, this is an on-site role at the sites where WANs are deployed. The program is being built as it scales — new WANs come online on aggressive timelines, and you are accountable for driving each one from categorization to ATO without becoming the bottleneck. You own that ambiguity, running the authorization and the project plan in parallel and keeping delivery on schedule while every package meets requirements.

Requirements

Active Top Secret/SCI clearance and U.S. citizenship; SAP eligibility a plus.
Demonstrated experience as an ISSM (or a senior ISSO ready to step up) for classified networks under DCSA/NISP.
Deep, hands-on RMF expertise — owning authorization packages (SSPs, POA&Ms) through ATO under NIST SP 800-53 and the DAAPM.
Direct experience with DCSA authorization processes and interfacing with DCSA as the cognizant security agency.
Strong project-management skills — planning, scheduling, and driving complex technical deployments to deadline.
Experience with WAN or network authorization, ideally multi-tenant or enterprise-scale classified networks (e.g., SIPR).
Active DoD 8570/8140 IAM Level II or III certification (e.g., CISSP, CISM, CASP+).

Nice To Haves

PMP or equivalent project-management certification.
Experience authorizing or operating SIPR/JWICS or other DoD transport networks.
Experience standing up and leading an ISSO team.
Familiarity with eMASS and DCSA/NISP eMASS authorization workflows.

Responsibilities

Serve as ISSM for Nooks' WANs, owning the full RMF lifecycle from categorization through continuous monitoring for each WAN.
Develop and maintain authorization packages — SSPs, POA&Ms, and supporting artifacts — to secure and sustain ATOs.
Ensure every package and control implementation aligns with NIST SP 800-53, the DAAPM, and DCSA requirements.
Project-manage WAN deployments end to end, driving each from kickoff to authorized, operational delivery.
Build and maintain deployment schedules, milestones, and dependencies so ATOs land on time and in scope.
Standardize repeatable authorization and deployment playbooks that scale to each new WAN and site.
Operate and sustain multi-tenant WANs, maintaining authorization boundaries across tenants.
Run continuous monitoring to keep authorizations valid and detect drift as the WAN grows.
Coordinate on-site implementation with the IT and operations teams building and running each site.
Serve as the primary security authority and point of contact for DCSA on WAN authorizations.
Stand up and lead a team of WAN ISSOs as the network scales.
Advise site and program stakeholders on WAN security posture, risk, and authorization status.