> Markdown version of [/jobs/ext/4484316-cloud-isso](https://www.wearedevelopers.com/jobs/ext/4484316-cloud-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud ISSO - **Company:** Bart & Associates - **Location:** McLean, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Identity and Access Management, Information Security Management, Information Systems Security Architecture Professional, Nmap, Software Vulnerability Management, HP WebInspect, Google Cloud, Cloud Platform System, Information Technology, Tenable Nessus, Splunk - **Published:** October 1, 2026 - **Apply:** https://www.juju.com/job/16_f58090d64 ## About the Role The ideal candidate brings strong expertise in cloud security engineering, vulnerability management, continuous monitoring, and enterprise cybersecurity operations across AWS, Azure, or Google Cloud Platform (GCP) environments., * Minimum of 9 years of experience in cybersecurity, information assurance, computer science, or related IT fields. * At least 7 years of experience serving as an ISSO within a cleared or classified environment. * Experience supporting cloud-based systems and cloud security operations in AWS, Azure, or GCP environments. * Bachelor's degree in computer science, Cybersecurity, Information Technology, Business Management, or related discipline preferred. * Advanced degree in a related field preferred. * Experience supporting RMF, NIST cybersecurity frameworks, and federal compliance programs required. Required Skills * Strong understanding of RMF, NIST standards, and federal cybersecurity compliance frameworks. * Experience securing cloud environments and supporting cloud authorization activities. * Familiarity with enterprise cybersecurity and vulnerability management tools including Tenable Nessus/Security Center, Splunk, IBM Guardium, HP Webinspect, NMAP and similar cybersecurity monitoring and assessment tools * Strong knowledge of cloud security principles, architecture, and secure configuration management. * Experience with continuous monitoring, vulnerability remediation, and risk analysis. * Strong analytical, troubleshooting, and problem-solving skills. * Ability to support multiple systems and priorities in fast-paced environments. * Excellent written and verbal communication skills. * Strong organizational and leadership capabilities. Certifications * CISSP (Certified Information Systems Security Professional) * GISP (Global Information Security Professional) * CASP+ (CompTIA Advanced Security Practitioner) * Or equivalent certification meeting DoD 8570 IAM Level III requirements Additionally, candidates must hold at least one cloud security certification from AWS, Azure, or GCP, including one or more of the following: * AWS Certified Security - Specialty ## Description The Senior Information Systems Security Officer (ISSO) - Cloud is responsible for overseeing cybersecurity compliance, risk management, and security operations for cloud-based and hybrid federal information systems within a cleared environment. This role supports the implementation and maintenance of secure cloud architectures while ensuring compliance with RMF, NIST, and federal cybersecurity requirements., * Serve as the Senior ISSO for cloud-based and hybrid information systems in classified and enterprise environments. * Support implementation and maintenance of RMF cybersecurity processes and authorization activities for cloud systems. * Conduct continuous monitoring, vulnerability management, and security compliance activities across cloud platforms. * Assess cloud security risks and coordinate remediation efforts with technical and engineering teams. * Maintain cybersecurity documentation including SSPs, POA&Ms, security assessments, and authorization artifacts. * Utilize enterprise security tools to identify, analyze, and mitigate cybersecurity vulnerabilities and threats. * Support security assessments, audits, inspections, and compliance reviews. * Coordinate with government stakeholders, system owners, and cloud engineers to ensure adherence to federal cybersecurity standards. * Monitor cloud environments for security events, suspicious activity, and configuration compliance issues. * Provide technical guidance on cloud security best practices, architecture, and risk mitigation strategies. * Support incident response and remediation activities involving cloud infrastructure and applications. * Track and report cybersecurity risks, findings, and remediation status to leadership., B&A has launched several programs to focus on employee engagement, wellness, and assistance. These include: * The B&A Cares program: 30/60/90-day wellness check ins, personal development, financial management, and stress management seminars, and more * A formal mentorship program * Job shadowing and cross training opportunities * Brand Ambassador program * Employee Assistance Program (EAP) - Access to various support resources to include counseling, legal guidance, financial planning, and more * Monthly teambuilding events * B&A Annual Wellness Challenges: #StepWithB&A, #WalkDuringLunchWithB&A, #VolunteeringWithB&A, #ExerciseDuringLunchWithB&A, and more At B&A, we place significant importance on improving the communities and lives of citizens across the nation through our involvement, technology expertise, and employees. B&A puts an emphasis on charitable efforts in the Northern Virginia area, including Capital Area Food Bank pantry drives, book donations, Hope for Henry Foundation events, and many more. In recognition of all these efforts, B&A has been named a Companies as Responsive Employers (CARE) award recipient by Northern Virginia Family Services and nominated by the Northern Virginia Chamber of Commerce for Outstanding Corporate Citizenship Award.