Location: Tampa, FL (Hybrid)
Employment Type: Full-Time Core business hours with on-call availability
Security Clearance: minimum T3 required

Job Summary

We are seeking an experienced Cybersecurity professional to oversee all information assurance and cybersecurity compliance activities for a federal government IT program. You will manage DoD RMF authorization packages, direct vulnerability remediation, serve as the S-ISSO for enterprise systems, and lead a team of security professionals ensuring the continuous security posture of a mission-critical environment.

Key Responsibilities
• Perform all cybersecurity operations and RMF compliance activities for a federal enterprise IT environment
• Manage DoD RMF ATO packages using eMASS across the full system authorization lifecycle
• Direct vulnerability management including IAVM patching, ACAS/STIG scanning, and POA&M management
• Develop and implement patch management and remediation plans meeting DoD timelines
• Support cybersecurity audits, penetration tests, red team exercises, and incident response
• Provide annual Privacy Impact Assessments and ongoing privacy compliance support
• Ensure cybersecurity workforce meets DoD 8140 qualification requirements
• Collaborate with CSSP, government ISSM, and DMDC Cybersecurity Division on all IA activities

Required Qualifications

• U.S. Citizenship required
• Security Clearance: minimum T3 required
• Bachelor's degree in a related field or CISSP certification
• Minimum 7 years of federal cybersecurity or IA experience with 2+ years in a lead/ISSO role
• Solid knowledge of NIST SP 800-53, RMF, and DoD security compliance requirements
• Hands-on eMASS experience for ATO package development and management
• Experience with ACAS, SCC/SCAP, and STIG implementation

Preferred Qualifications
• CISSP, CASP+, or CEH certification
• Cloud security certification (AWS, Azure, Red Hat OpenStack, or equivalent)
• Experience with cloud infrastructure security at DoD IL4/IL5
• Knowledge of privacy compliance frameworks including Privacy Act and PIAs

Certifications
• CISSP or equivalent required or qualifying degree
• DoD 8570/8140 baseline certification required
• Cloud platform certification required