Principal Information System Security Officer

The role

The ISSO owns authorization documentation for a platform at the unclassified (CUI) level. This person will establish and maintain ATO packages, manage interconnection agreements, and transition packages from NIST SP 800-53 Rev 4 to Rev 5.

What you will do

• Owns and maintains the authorization package and body of evidence in eMASS
• Executes the package transition from NIST SP 800-53 Rev 4 to Rev 5
• Develops and maintains interconnection and boundary documentation
• Owns POA&M entries and milestone tracking
• Prepares ConMon documentation and reporting
• Maintains the SBOM and component version representation
• Participates in the CCB and documents authorization impact of changes
• Coordinates with security engineers, development teams, SCAs, and AO staff
• Drafts risk acceptance and deviation documentation
• Provides surge support and backfill for ISSOs of other environments

Required qualifications

• U.S. citizen
• Able to obtain and maintain a TS/SCI clearance with CI polygraph
• Current DoD 8570.01-M IAM Level II or III certification
• 5 or more years of relevant experience developing and maintaining RMF authorization packages
• Working knowledge of RMF, NIST SP 800-37, NIST SP 800-53 (Rev 4 and Rev 5), NIST SP 800-53B, NIST SP 800-60, and DoDI 8510.01
• Experience maintaining the BoE, control statements, and POA&Ms in eMASS
• Experience writing or maintaining ISAs or other interconnection agreements (NIST SP 800-47 Rev 1)
• Understanding of network flows and architecture, especially cloud (Azure and AWS), on-premises, and hybrid environments
• Familiarity with auditing and control assessments, including working with SCAs
• Familiarity with the SDLC and working across multiple Agile or DevSecOps development teams
• Knowledge of government security requirements for unclassified and CUI systems
• Strong written and verbal communication skills

Nice to have

• 7 or more years of relevant experience developing and maintaining RMF authorization packages
• Active TS/SCI clearance with CI polygraph
• Experience migrating an authorization package from NIST SP 800-53 Rev 4 to Rev 5
• Experience taking a package from creation to full ATO
• Experience with classified system authorization (for example CNSSI 1253 overlays)
• Experience reading and interpreting vulnerability scan results to support CVE validation and POA&M entries
• Experience mentoring junior teammates

Benefits

• Performance-based bonuses
• Medical coverage
• Dental coverage
• Vision coverage
• 401(k) plan with company match
• Substantial paid time off and holidays
• Flexible work arrangements where possible
• Income protection benefits

Before you apply

• Must be a U.S. citizen
• Must be able to obtain and maintain a TS/SCI clearance with CI polygraph
• Will require a counterintelligence polygraph upon hiring if not already attained

About the company

Clarity Innovations is a national security partner delivering solutions to the Intelligence Community (IC) and Department of Defense (DoD). They focus on software and data engineering for Information Warfare, Cyber Operations, Operational Security, and Data Structuring.