SAP Information System Security Officer (ISSO)

At System High Corporation-a Top Washington-Area Workplace (The Washington Post, 2023-2025), a Top Workplaces Culture Excellence honoree (April 2025), and a three-time VETS Indexes 3-Star Employer-we protect and advance the nation's most critical missions. As part of our team, you'll tackle complex security challenges across SAP, SCI, and Collateral programs. If you're driven by national security, innovation, and integrity, we want to hear from you.

The ISSO is responsible for negotiating and facilitating the request, deployment, and operationalization of various customer information systems.They are responsible for ensuring that systems comply with relevant security standards and regulations, such as those mandated by the Risk Management Framework (RMF) / Joint SAP Implementation Guide (JSIG) / and or DIA requirements.They work to ensure that systems are properly authorized for operation and that they maintain compliance throughout their lifecycle. Must have current experience in the U.S. Government, DoD, Intelligence, or contractor community in security management.

Essential Responsibilities:

1. Manage the request for and deployment, installation, and oversight of unclassified and classified information systems (IS) within Sensitive Compartmented Information Facilities (SCIF) /Special Access Program Facility (SAPF) (i.e. NIPR, SIPR, SGN, AF7, JWICs, and COE.
2. Carry out technical administration of IS in accordance with customer security requirements, primarily Risk Management Framework (RMF).
3. eet the Core and Additional Knowledge, Skills, and Abilities Tasks (KSATs) defined in the DCWF for Work Role 612 (NIST: SP-RM-002).
4. Upkeep, monitor, analyze, and respond to network and security events.
5. Support Assessment and Authorization (A&A), Interim Authority to Test (IATT), and Authority to Operate (ATO) packages activities, including POA&M development, control implementation, and continuous monitoring.
6. Experience working with ICD requirements, RMF implementation.
7. Collaborate with system administrators, network engineers, and cybersecurity personnel to evaluate system security posture.
8. Document and maintain system security artifacts in accordance with NIST SP 800-53 or customer mandated policies and regulations.
9. Conduct periodic reviews and support audits and inspections.
10. Experience applying ICD 503 using the JSIG or NIST 800-53
11. Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
12. Manage closure of vulnerabilities and audit user activities on the systems.
13. Hands-on experience with industry standard Information Assurance tools
14. Technical familiarity with Windows or UNIX-based operating systems, and their security requirements.
15. Experience with the acquisition and integration of DISA circuits.
16. Act as alternate COMSEC Responsible Officer (CRO).
17. Provide updates for monthly documentation on system status, cybersecurity posture, and executive status briefings.

Required Qualification

Clearance Requirement:TS/SCI with SAP eligibility, willingness to take CI Poly

1. Bachelor's degree in information technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an ABET accredited or CAE institution and/or
   
   
   
   1. 4 - 8+ years of ISSE, System Administrator, or ISSO experience
   2. DoD 8570 / 8140 IAT Level II certification;
   3. Experience developing RMF packages and conducting ATO Status updates to include drafting of Assessment and Authorities (A&A) Interim authority to Test (IATT) and Authority to Connect (ATC) packages.
   4. Experience in supporting AF7, SGN, or JWICs.
   5. Experience performing as a COMSEC Responsible Officer (CRO). Experience creating messages required, for the COMSEC controlling authority's approval, to obtain NSA's approval to issue Keying Material (KEYMAT).
   6. Experience keying, configuring, initializing and operating COMSEC equipment.
   7. Experience conducting vulnerability testing and analysis on DoD networks.
   8. Current certifications in Security+, CCNA, CISSP, or others related to Networking and Cybersecurity.
   9. Prior experience with Windows or Linux Operating Systems Proven track record supporting the DoD across physical, information, personnel, industrial, operational, and communications security disciplines, with a strong focus on regulatory compliance
   10. The candidate must be able to work with minimal supervision on multiple tasks and work well under deadlines, frequently with quick turnaround.
   11. Ability to develop solutions to a variety of complex problems
   12. Ability to plan, schedule and prioritize activities in accomplishing objectives
   13. Self-starter with minimum supervision
   14. Must have the ability to build rapport, create a harmonious working environment, and display professional demeanor while valuing differences.
   15. Good verbal and written communication skills
   16. Individual must be reliable, dependable and trustworthy.
   17. Excellent verbal and written communication skills are critical.