Senior Information Systems Security Engineer – ISSE

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and provide technical direction to MS InTune and SCCM Endpoint Engineers.

• Assist in the comprehensive restructuring and modernization of the Agency's O365 ATO package along with the related eMASS documentation.

• Evaluate existing RMF and Information Assurance documentation to pinpoint outdated, incomplete, redundant, or technically inaccurate information.

• Create and revise SSP content, security-control implementation statements, POA&M documentation, inheritance mappings, system diagrams, and other essential authorization artifacts.

• Examine relevant NIST SP 800-53 controls, DoD security requirements, DISA guidance, and inherited enterprise controls.

• Assess Microsoft 365/O365 configurations and technical artifacts to verify the implementation of security controls.

• Collaborate with Microsoft 365 engineers, system administrators, endpoint engineers, cybersecurity personnel, and technical SMEs to gather and validate ATO information.

• Analyze technical evidence for completeness, consistency, traceability, and alignment with documented security-control implementation.

• Document ICAM, endpoint security, encryption, continuous monitoring, and Zero Trust capabilities within the O365 authorization boundary.

• Identify gaps in documentation and evidence, coordinating resolutions with technical stakeholders.

• Assist in the development and maintenance of POA&Ms and remediation documentation.

• Utilize eMASS to create, update, organize, and maintain authorization artifacts and supporting evidence.

• Aid the Government ISSM in the preparation of the O365 authorization package for cybersecurity and authorization stakeholder review.

• Address deficiencies, inquiries, and comments regarding technical documentation from Government reviews.

• Support the creation of a technically accurate, complete, and traceable O365 ATO package ready for submission.

• Ensure traceability of configuration, documentation, and evidence throughout the ATO rewrite process.

• Facilitate knowledge transfer and establish repeatable processes for maintaining authorization documentation.

⛳️ Requirements

• Active Secret clearance is required.

• Security+ certification or higher is mandatory.

• Bachelor's degree in Cybersecurity, Information Technology, Systems Engineering, Computer Science, or a related technical field, or an equivalent combination of education and relevant experience.

• Approximately 7–10 years of progressive experience in cybersecurity, information assurance, systems security engineering, RMF, or related fields.

• Proven experience in developing or maintaining RMF authorization packages within DoD or other federal environments.

• Working knowledge of NIST SP 800-53 security controls and RMF processes.

• Experience in developing and reviewing SSPs, security-control implementation statements, POA&Ms, inheritance documentation, system architecture information, and supporting authorization evidence.

• Familiarity with eMASS or a comparable Governance, Risk, and Compliance (GRC) platform.

• Ability to analyze technical configurations and convert technical implementation into precise security-control documentation.

• Understanding of Microsoft 365/O365 enterprise environments and their associated security capabilities.

• Experience in collaborative work with ISSMs, system owners, engineers, administrators, and cybersecurity personnel.

• Strong skills in technical writing, analysis, documentation, and communication.

• Preferred: Microsoft security certifications such as SC-100, SC-200, AZ-500, or equivalent Microsoft 365/Azure security credentials are highly desirable.

🏝️ Benefits

• Paid holidays.

• Paid time off including sick leave and vacation.

• Medical, dental, and vision insurance.

• Flexible spending accounts.

• Short and long-term disability coverage.

• Company-paid life insurance.

• 401(k) plan with company match.

• Discretionary profit sharing.

• Tuition reimbursement.