> Markdown version of [/jobs/ext/2016895-systems-admin-isso-sia](https://www.wearedevelopers.com/jobs/ext/2016895-systems-admin-isso-sia). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Systems Admin / ISSO-SIA

- **Company:** AGENSYS CORP
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Xacta, CompTIA Security+, Cyber Security, Nessus, Plan of Action and Milestones
- **Published:** August 10, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9084537/systems-admin-isso-sia

## About the Role

Leidos is seeking an experienced Information System Security Officer (ISSO) / Security Impact Assessment (SIA) professional to support a government customer onsite at the Pentagon. The position will support Risk Management Framework (RMF) activities for the 844CS National Military Command Center (NMCC). The role requires strong initiative, organization, communication, customer service, and the ability to operate in a fast-paced environment., * Bachelor's degree or equivalent work experience and certifications.

 * Current DoD 8570 IAT II certification, including GSEC, Security+, SCNP, or SSCP.
 * 8-10 years of cybersecurity experience.
 * Familiarity with the DoD STIG process.
 * Excellent verbal and written communication skills.
 * Familiarity with ACAS, eMASS, and XACTA.

Desired Qualifications:

 * Nessus experience.
 * Systems administration experience.
 * Experience with CCRI scoring.
 * Security Control Knowledge and Self-Assessment experience.
 * Experience obtaining an ATO and taking a system through the full RMF process.

## Description

* Run and review Evaluate STIG scans and manually validate STIG checklists.
 * Analyze vulnerability scans and STIG results to identify critical open vulnerabilities requiring remediation.
 * Work with system owners and work centers to close, mitigate, or document vulnerabilities through POA&Ms.
 * Identify risks and impacts and recommend appropriate mitigation strategies.
 * Provide remediation recommendations based on DoW and Air Force guidance and directives.
 * Validate system hardware/software inventories against system assets.
 * Create and maintain SOPs and Work Instructions.
 * Create and track POA&Ms throughout the System Impact Assessment lifecycle.
 * Create Remedy tickets to track STIG implementation.
 * Complete monthly application STIG status reports and POA&M updates.
 * Complete and validate STIG/SRG checklists for RMF on a quarterly basis.
 * Provide management status reports and document system changes.
 * Develop and maintain POA&Ms and support remediation activities.
 * Support continuous monitoring and POA&M activities.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)