Sr ISSO/RMF Lead - USSF XC3

Overview

Silotech Group, Inc. is a Woman-Owned Small Business (WOSB) and Service-Disabled Veteran-Owned Small Business (SDVOSB) headquartered in San Antonio, Texas. We deliver full-spectrum cybersecurity, digital transformation, cloud migration, DevSecOps, and emerging technology Research and Development (R&D) solutions across the Department of War (DoW), Intelligence Community (IC), Federal civilian, State, Local and Education (SLED), commercial, and international markets.

Silotech Group is seeking a Senior Information Systems Security Officer (ISSO) / RMF Lead to own Risk Management Framework (RMF) execution and authorization outcomes for Silotech's software product suite, including client Authorization to Operate (ATO) needs, Provisional Authorization to Operate (P-ATO) and FedRAMP Marketplace authorization strategy, and ATO support across Federal customers. This role is for an experienced security practitioner who can independently lead the P-ATO/Marketplace authorization strategy, own client-facing authorization relationships, and mentor junior ISSOs supporting the platform.

The Senior ISSO partners closely with the assigned Program Manager and Information System Security Manager (ISSM), driving systems through Categorize, Select, Implement, Assess, Authorize, and Monitor activities across multiple concurrent cloud and on-prem environments, while owning audit-ready documentation. This position is well suited for someone who is self-directed, comfortable translating complex cloud and platform architecture (including Salesforce) into compliance language, and experienced operating in high-pressure authorization timelines.

This position is contingent upon contract award.

Location

Remote / Hybrid (US Domestic). Occasional travel to client sites may be required.

Clearance

Top Secret preferred (Secret minimum required).

Essential Role and Responsibilities

• Lead execution of the RMF lifecycle across application environments, including SSP authorship, control implementation, and assessment activities, in partnership with the assigned Program Manager and ISSM
• Own and drive Silotech's software product suite Provisional ATO (P-ATO) and FedRAMP Marketplace authorization strategy, including preparation and submission of P-ATO, ATO, IATT, and FedRAMP High baseline packages
• Serve as the client-facing authorization lead for ATO engagements and ATO support for application customers
• Own Plans of Action and Milestones (POA&Ms) through remediation and closure, driving prioritization with system owners
• Maintain ATO sustainment across multiple concurrent cloud and on-prem environments
• Direct vulnerability scanning (e.g., ACAS/Nessus) and STIG compliance reviews, driving remediation and risk decisions
• Lead Information Security Continuous Monitoring (ISCM) and Continuous ATO activities to sustain authorization posture
• Own system records within eMASS, Xacta, or other GRC/RMF tracking tools
• Define and defend system Authorization Boundaries, minimizing scope and data ingress/egress risk
• Design phishing-resistant IAM controls aligned to federal identity mandates (e.g., AAL3/IAL3)
• Partner with system owners, engineers, and compliance stakeholders on system boundaries and technical dependencies
• Present security posture, risk status, and compliance metrics directly to the Program Manager, ISSM, and AO, including Monthly Status Reports (MSRs) and PMR cybersecurity updates
• Mentor junior ISSOs and contribute to a team culture of continuous improvement, transparency, and accountability

What You'll Work On

• P-ATO and FedRAMP Marketplace authorization strategy, plus client ATO engagements, in partnership with the Program Manager
• ATO sustainment across multiple concurrent cloud and on-prem environments
• eMASS/Xacta system records and POA&M ownership
• Translating cloud and platform architecture (including Salesforce) into compliance-ready documentation
• Security metrics, risk reporting, Monthly Status Reports/PMR updates, and continuous improvement initiatives
• Mentoring junior ISSOs and using AI-assisted tools to streamline documentation and compliance tracking

Required Qualifications

• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, or a related field required; Master's degree in Cybersecurity or Information Assurance preferred
• 7+ years of experience in information systems security, with demonstrated leadership across the full RMF lifecycle
• Experience leading systems to FedRAMP High, DoD IL4/IL5, P-ATO/FedRAMP Marketplace authorization, or equivalent high-impact baseline authorization
• Strong working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-171, FedRAMP, DoDI 8510.01, DFARS, and DoD/Federal cybersecurity policy
• DoD 8570/8140 (AFMAN 17-1303) compliant IAM Level II/III certification required (e.g., Security+ CE, CISM, CISSP, CySA+)
• Top Secret clearance preferred; Secret clearance minimum required
• Eligibility to obtain and maintain Common Access Card (CAC) access
• Comfortable using AI-assisted tools (e.g., ChatGPT, Claude) to support documentation, reporting, and process efficiency
• Demonstrated ability to operate within compliance and quality frameworks such as CMMC Level 2, ISO 27001:2022, ISO/IEC 20000-1:2018, ISO 9001:2015, and CMMI Dev/3
• Strong executive-level communication skills and a track record of mentoring junior security staff
• Willingness to travel occasionally to client sites.

Preferred Qualifications

• CISSP or CISM certification
• CMMC-RP or CMMC-RPA (Cybersecurity Maturity Model Certification - Registered Practitioner / Registered Practitioner Advanced)
• CompTIA PenTest+ and/or Certified Security Analytics Professional
• CompTIA Network Security Professional and/or Network Vulnerability Assessment Professional
• Certified in Cybersecurity (CC), ISC2
• Hands-on experience with eMASS or Xacta
• Experience with Salesforce Government Cloud architecture
• Experience supporting Continuous ATO or Assessment and Authorization (A&A) programs

Desired Traits

• Self-directed, with strong ownership over authorization outcomes
• Detail-oriented and organized, especially when managing documentation and control evidence
• Comfortable presenting risk posture and compliance status to program leadership, clients, and the AO
• Strong listening and communication skills with both technical and non-technical stakeholders
• Adaptable and calm under high-pressure authorization timelines and shifting priorities
• Comfortable with occasional travel to support client engagements

Equal Opportunity Employer Statement

Silotech Group, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, protected veteran status, disability status, or any other characteristic protected by federal, state, or local law.
Silotech Group participates in E-Verify. Reasonable accommodations available upon request.
Silotech strongly encourages applications from veterans, military spouses, and members of the Reserve and National Guard.