PLEX Solutions, A Part of Markon is looking for an RMF / Information System Security Officer (ISSO), to support a contract in the Annapolis Junction, MD area.
Responsibilities- Own and drive the RMF process for assigned systems
- Develop, maintain, and update System Security Plans (SSPs)
- Support systems through ATO, reauthorization, and continuous monitoring
- Interpret and document implementation of NIST SP 800-53 security controls
- Work with DISA STIGs, findings, remediation, and compliance documentation
- Prepare and maintain required RMF documentation and authorization artifacts
- Gather and organize control implementation evidence
- Identify documentation, control, and evidence gaps and coordinate their resolution
- Develop and maintain POA&Ms and associated remediation documentation
- Work with engineers and system administrators to understand and document technical control implementations
- Support government security reviews and assessment activities
- Communicate directly with government customers, assessors, technical teams, and other stakeholders
- Maintain authorization documentation as systems and environments change
- Active TS/SCI w/ Polygraph
- CompTIA Security+ certification
- Professional U.S. Government/DoD GRC and RMF experience
- Demonstrated ability to independently develop, maintain, and own SSPs
- Working knowledge of the DoD Risk Management Framework
- Familiarity with NIST SP 800-53 security controls
- Familiarity with DISA STIGs
- Experience preparing RMF/ATO documentation, control evidence, and assessment artifacts
- Experience supporting systems through authorization and/or continuous monitoring
- Experience working with RHEL systems
- Strong technical writing and documentation skills
- Strong customer-facing communication skills
Preferred Qualifications
- Experience serving as an ISSO or equivalent RMF/GRC role
- Docker, Kubernetes, or other container/container-orchestration experience is a major plus
- Experience with eMASS
- Experience developing and managing POA&Ms
- Experience with DoD authorization packages and ATOs
- Experience reviewing or implementing DISA STIG requirements
- Experience with vulnerability and compliance scanning
- Linux/RHEL system administration experience
Eager to join a team where your skills are valued, your growth is nurtured, and your impact is profound? Look no further than Markon, a premier consulting firm deeply dedicated to advancing our nation's most critical missions.
At Markon, we don't just offer jobs – we offer opportunities for personal and professional transformation. Empowering our employees to lead, innovate, and excel, we foster an environment where new ideas are not just welcomed but celebrated. As a perennial Washington Post Top Workplace, we prioritize the well-being and success of our team members, ensuring they can bring their best selves to work.
Headquartered in Falls Church, Virginia, Markon has garnered national recognition for our unwavering dedication to excellence in serving the intelligence community, as well as federal civilian and defense agencies. Our growing reach extends across 17 states, 116 countries, and 5 continents, where our team of dynamic professionals collaborates to deliver unparalleled program and project management services.
Markon values people and the tremendous impact each individual can make – which is why we’re consistently recognized as one of the best places to work in federal government consulting. Here, you can help solve the nation’s most important challenges, surrounded by colleagues who help you grow, advance, and succeed. We are deeply dedicated to what matters – bringing out the best in each other to advance our clients’ missions.Join us and make a meaningful impact.
Markon is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, national origin, age, protected veteran status, or disability status. This job posting will remain open until the position is filled.
Benefits Offered: Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Flexible Spending Accounts, EAP, Training and Tuition Assistance, Paid Time Off, and Holidays.
Skills Required
- Active TS/SCI with polygraph
- CompTIA Security+ certification
- Professional U.S. Government, DoD GRC, and RMF experience
- Ability to independently develop, maintain, and own System Security Plans
- Working knowledge of the DoD Risk Management Framework
- Familiarity with NIST SP 800-53 security controls
- Familiarity with DISA STIGs
- Experience preparing RMF/ATO documentation, control evidence, and assessment artifacts
- Experience supporting systems through authorization or continuous monitoring
- Experience working with RHEL systems
- Strong technical writing and documentation skills
- Strong customer-facing communication skills
- Experience serving as an ISSO or equivalent RMF/GRC professional
- Docker, Kubernetes, or other container or container-orchestration experience
- Experience with eMASS
- Experience developing and managing POA&Ms
- Experience with DoD authorization packages and ATOs
- Experience reviewing or implementing DISA STIG requirements
- Experience with vulnerability and compliance scanning
- Linux/RHEL system administration experience
What We Do
Markon is a professional services firm and mission integrator serving national-security and federal clients. It delivers full-spectrum cyber operations, digital transformation, and critical intelligence solutions, combining cyber exercises, defensive operations, training, threat analysis, modernized architectures, secure software delivery, data, cloud, automation, operational leadership, infrastructure alignment, process engineering, and software optimization to strengthen secure, resilient mission readiness across complex federal environments and national missions.
