DescriptionPLEX Solutions, A Part of Markon is looking for an RMF / Information System Security Officer (ISSO), to support a contract in the Annapolis Junction, MD area.
Responsibilities
- Own and drive the RMF process for assigned systems
- Develop, maintain, and update System Security Plans (SSPs)
- Support systems through ATO, reauthorization, and continuous monitoring
- Interpret and document implementation of NIST SP 800-53 security controls
- Work with DISA STIGs, findings, remediation, and compliance documentation
- Prepare and maintain required RMF documentation and authorization artifacts
- Gather and organize control implementation evidence
- Identify documentation, control, and evidence gaps and coordinate their resolution
- Develop and maintain POA&Ms and associated remediation documentation
- Work with engineers and system administrators to understand and document technical control implementations
- Support government security reviews and assessment activities
- Communicate directly with government customers, assessors, technical teams, and other stakeholders
- Maintain authorization documentation as systems and environments change
Qualifications
- Active TS/SCI w/ Polygraph
- CompTIA Security+ certification
- Professional U.S. Government/DoD GRC and RMF experience
- Demonstrated ability to independently develop, maintain, and own SSPs
- Working knowledge of the DoD Risk Management Framework
- Familiarity with NIST SP 800-53 security controls
- Familiarity with DISA STIGs
- Experience preparing RMF/ATO documentation, control evidence, and assessment artifacts
- Experience supporting systems through authorization and/or continuous monitoring
- Experience working with RHEL systems
- Strong technical writing and documentation skills
- Strong customer-facing communication skills
Preferred Qualifications
- Experience serving as an ISSO or equivalent RMF/GRC role
- Docker, Kubernetes, or other container/container-orchestration experience is a major plus
- Experience with eMASS
- Experience developing and managing POA&Ms
- Experience with DoD authorization packages and ATOs
- Experience reviewing or implementing DISA STIG requirements
- Experience with vulnerability and compliance scanning
- Linux/RHEL system administration experience
Salary RangeUSD $120,000.00 - USD $200,000.00 /Yr.The Markon pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
