ISSM

About the role

Koniag IT Systems, LLC a Koniag Government Services company, is seeking an ISSM Consultant with a Top-Secret security clearance to support KITS and our government customer. Positions are considered for Las Vegas, NV; Albuquerque, NM; Germantown, MD; or Washington, DC. This is an on‑site role.

Responsibilities

• Authorization Activities: Ensure system, application, and hardware authorization activities such as Information System Security Plans (ISSPs), Risk Assessments, and Security Baselines are completed timely and accurately; manage initial and re‑authorization processes; develop comprehensive authorization packages for stakeholder review; submit finalized packages to the Authorizing Official (AO) or AO Designated Representative (AODR) for approval.
• Maintenance Activities: Maintain current knowledge of AO‑approved risk boundaries and tolerance levels; update authorization documentation at defined frequencies per risk management objectives; ensure continuous monitoring of security controls and implement necessary updates.
• Approval and Management: Approve operations only when covered by existing authorizations; ensure decisions support the AO with full transparency; actively manage and coordinate onboarding and termination for contractor personnel; ensure work products meet Enterprise Cybersecurity Program requirements and quality standards; provide strategic support at meetings, briefings, and presentations; maintain productive relationships with other contractors supporting NA‑IM and NNSA.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum 7+ years of experience in cybersecurity or information security.
• Minimum 5+ years of experience with RMF or similar security authorization frameworks.
• Experience as an ISSM or equivalent managing security authorization processes.
• Experience developing and maintaining security documentation including ISSPs, Risk Assessments, and Security Baselines.
• Experience working with federal agencies, particularly DOE, NNSA, or DoD.
• Training and experience meeting NNSA and/or DoD 8140 requirements (or equivalent).
• Top‑Secret security clearance (Q) required.

Skills and Competencies

• Comprehensive knowledge of the NIST Risk Management Framework (RMF).
• Strong understanding of federal cybersecurity regulations, policies, and standards.
• Proficiency with security authorization documentation and processes.
• Experience with risk assessment methodologies and practices.
• Knowledge of security control implementation and assessment.
• Strong project management skills; ability to manage multiple authorization projects simultaneously.
• Excellent documentation skills and attention to detail.
• Superior communication skills, written and verbal.
• Ability to interface effectively with senior leadership, technical staff, and contractors.
• Experience with continuous monitoring and ongoing authorization processes.
• Knowledge of incident management and reporting requirements.
• Understanding of NNSA and DOE security requirements.
• Ability to obtain and maintain required security clearance.
• Experience coordinating personnel security processes (onboarding/offboarding).
• Strong interpersonal skills and ability to collaborate across organizational boundaries.

Preferred Qualifications

• Master’s degree in Cybersecurity, Information Technology, or related field.
• Current security clearance.
• Certifications such as CISSP, CAP, CISM, or equivalent.
• Experience specifically with DOE NNSA cybersecurity requirements and authorization processes.
• Experience with Archer, eMASS or similar authorization management systems.
• Knowledge of FISCAM, FISMA, and other federal compliance frameworks.
• Experience working in classified environments.
• Prior experience working with Authorizing Officials and security governance bodies.
• Experience developing security policies and procedures.
• Knowledge of industrial control system security.
• Experience with system categorization processes.
• Familiarity with supply chain risk management.
• Experience presenting cybersecurity concepts to executive leadership.
• Experience with cybersecurity metrics and reporting.

Benefits

• Medical, dental, and vision insurance
• 401(k) retirement plan
• Paid time off
• Paid parental leave
• Life and disability insurance
• Flexible spending accounts
• Commuter benefits
• Tuition reimbursement