ISSM/ISSO - IT & Cybersecurity SME

Ursa Mobile, Inc supports mission-critical work in Government-secured environments, and this role helps keep classified networks ready for authorization and continuous operation. If you have strong IT and cybersecurity expertise, you will help sustain compliance, harden systems, and support incident readiness across NIPR, SIPR, JWICS, and other special-access networks.

Location: Arlington, VA (onsite)

Salary: $130,000 per year

Employment: Full-time, W-2

What you will do

• Support Government-furnished information systems on NIPR, SIPR, JWICS and other special-access networks.
• Serve as an ISSM/ISSO by maintaining System Security Plans (SSPs), POA&Ms, and RMF documentation required to maintain the Authorization to Operate (ATO).
• Coordinate with the Government ISSM on Assessment and Authorization (A&A) activities to sustain continuous ATO status.
• Implement and maintain cybersecurity controls, including patch management, STIG configuration, system hardening, and audit-log review.
• Perform diagnostics, fault isolation, and performance optimization for classified network infrastructure.
• Respond to and report cybersecurity incidents in line with the DoDI 8530 series and applicable directives.
• Manage user account lifecycle activities (creation, modification, termination) under least privilege.
• Maintain network diagrams, configuration baselines, and security documentation.
• Support supply-chain risk management (SCRM) for hardware and software procurements.
• Support secure IP-based communications across classified enclaves, VPNs, and tactical communications suites, including rapid prototyping and field testing of emerging capabilities.

What you bring

• Bachelor’s degree in computer science, IT, cybersecurity, or a related field (equivalent experience may be considered).
• 7+ years of IT experience, including 4+ years in a classified DoD network environment (NIPR/SIPR/JWICS).
• DoD 8570.01-M / 8140 IAT Level II certification at time of assignment (examples: CompTIA Security+ CE, CISSP, or equivalent).
• Active TS/SCI clearance; SAP access required or attainable within 60 days.

Helpful experience

• ISSO experience with hands-on RMF/A&A on DoD classified systems.
• Knowledge of NIST SP 800-53, DoDI 8510.01, and the DoDI 8500 series, including STIG implementation and POA&M management.
• Experience with router/switch configuration, firewall management, and secure-enclave operations; familiarity with eMASS and automation.
• Strongly preferred certifications: CISSP, CySA+ or CASP+ CE, CEH, Azure Administrator (or equivalent), and DoD RMF training (CDSE or equivalent).

Benefits

• Medical, dental, vision
• Employer-paid life insurance
• 401(k) with company match
• PTO
• Paid sick leave

Additional details

Onsite work will be at Government-secured facilities in the NCR (Crystal City / Arlington, VA area). Final candidates are subject to Government resume review against the contract’s labor category standards.

Technologies you may work with

• NIPR, SIPR, JWICS
• RMF, SSPs, POA&Ms, ATO
• DoDI 8530 series, STIG configuration
• VPNs, eMASS
• NIST SP 800-53, DoDI 8510.01, DoDI 8500 series
• CompTIA Security+ CE, CISSP, CySA+, CASP+ CE, CEH
• Azure Administrator, CDSE