> Markdown version of [/jobs/ext/520341-issm](https://www.wearedevelopers.com/jobs/ext/520341-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ISSM

- **Company:** Zachary Piper
- **Location:** Arlington, VA, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $165,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Cyber Security, Information Systems, Identity and Access Management, Information Security Management, Security Support Provider Interface, Software Vulnerability Management, Cloud Platform System, Devsecops
- **Published:** June 5, 2026
- **Apply:** https://www.careerjet.com/jobad/us183b6665c14f77f6b630fed3d18c7559

## About the Role

* 10+ years of experience in information assurance, cybersecurity, or system security engineering roles
 * Strong experience with RMF, ATO processes, GRC, eMASS, and DevSecOps in cloud environments
 * Bachelor's degree in Cybersecurity, Information Systems, Engineering, or equivalent professional experience
 * IAT/IAM certification
 * Active or TS/SCI clearance required

## Description

Zachary Piper Solutions is seeking a Information System Security Manager (ISSM) to support a company focused on secure cloud-based autonomy and artificial intelligence programs within the defense sector. This position is onsite in Arlington, VA offices. The ISSM will provide hands-on security leadership supporting DevSecOps pipelines and DoD authorization efforts for advanced AI, automation, and autonomous systems. This role directly enables mission-critical AI capabilities to securely transition into operational DoD environments.
Responsibilities for the Information System Security Manager (ISSM) include:

 * Lead and execute RMF and ATO processes for cloud-based AI and autonomy systems entering DoD environments
 * Provide hands-on security support within AWS-based DevSecOps pipelines, ensuring compliance with DoD security requirements
 * Work directly with engineering teams, AWS partners, and external vendors to guide systems through authorization
 * Perform vulnerability management, mitigation, and continuous monitoring activities using eMASS and related tools
 * Translate government security requirements into actionable guidance for commercial and technical stakeholders


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)