Information System Security Officer, ISSO

Dynanet Corporation

Information System Security Officer driving SSP creation and ATO workflows for cloud applications. Collaborating on compliance and monitoring integration in cloud and on-prem ecosystems.

Posted 6/2/2026full-timeRemote • Maryland • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudPythonTerraform

About the role

Key responsibilities & impact

Serve as a hands-on Information System Security Officer (ISSO) supporting the modernization and accreditation of applications across the Agency's evolving cloud and on-prem ecosystem.
Drive SSP creation, automated ATO workflows, continuous monitoring integration, secure baseline enforcement for the Landing Zone Architecture (LZA), and the adoption of an OTEL-first monitoring and logging platform.
Create full Security System Plans (SSPs) for new applications, including system boundaries, control implementation statements, architecture mapping, and inheritance models.
Support, update, and maintain SSPs for existing applications through the full ATO lifecycle.
Develop and implement automated ATO pipelines, including evidence generation, validation tasks, and CI/CD gating aligned to RMF requirements.
Integrate continuous monitoring strategies, telemetry sources, alerting thresholds, and control-health scoring.
Automate evidence collection through scripts, scheduling logic, secure repositories, and structured control mappings.
Define, maintain, and enforce secure baselines for the Landing Zone Architecture (LZA) across cloud and on-prem environments.
Implement and scale compliance-as-code, translating NIST and agency controls into machine-testable rules and automated evaluations.
Establish and manage an OTEL-first platform for organization-wide logging, metrics, tracing, APM, and compliance telemetry.
Enable OTEL-driven continuous compliance through real-time signals tied to control effectiveness and evidence requirements.
Collaborate with engineering, cloud, security, and application teams to provide hands-on control remediation, configuration updates, and automation support.
Partner with assessors and AOs to ensure high-quality artifacts, timely responses, and successful accreditation reviews.

Requirements

What you’ll need

5–10+ years of experience in ISSO, security engineering, or RMF/FISMA compliance roles (hands on technical focus).
Strong experience creating SSPs, implementing controls, and driving ATOs for cloud or hybrid systems.
Hands on background with AWS, Azure, and on prem environments, including inheritance models and shared-responsibility controls.
Experience implementing continuous monitoring, SIEM integrations, telemetry pipelines, and automated control health reporting.
Proficiency with scripting (Python, PowerShell, Bash) to automate evidence collection, configuration checks, and compliance tasks.
Experience with IaC tools (Terraform, Bicep, CloudFormation) and building automated compliance checks within CI/CD.
Working knowledge of cloud networking, identity (Entra IAM/IAM), endpoint telemetry, containerized environments, and security baseline enforcement.
Strong understanding of NIST RMF, FISMA, FedRAMP, vulnerability management, and POA&M remediation processes.
Experience implementing OpenTelemetry collectors, instrumentation, and pipelines for traces, logs, and metrics.
Experience with compliance as code frameworks (OPA/Conftest, Regula, or custom rulesets).
Security certifications such as CISSP, CAP, Security+, CCSK, CCSP, or cloud security certifications.
Experience automating ATO processes, evidence generation, and continuous monitoring dashboards.
Background supporting Zero Trust principles, secure baseline patterns, and telemetry driven security operations.

Benefits

Comp & perks

Medical and Dental Insurance
Paid Time Off/Holidays
401(k) Retirement Plans with Matching
Remote Work*
Paid Training
Employee Referral Program
Employee Development Program

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information System Security Officer (ISSO)Security System Plans (SSPs)Automated ATO workflowsContinuous monitoringScripting (Python, PowerShell, Bash)Infrastructure as Code (IaC)OpenTelemetryCloud networkingCompliance as codeControl implementation

Soft Skills

CollaborationCommunicationProblem-solvingAttention to detailProject management

Certifications

CISSPCAPSecurity+CCSKCCSP