{"schemaVersion":"jobsearcher.job.v1","id":"2b2ca751b87a6dc348324a75","url":"https://jobsearcher.com/jobs/2b2ca751b87a6dc348324a75","canonicalUrl":"https://jobsearcher.com/jobs/2b2ca751b87a6dc348324a75","title":"ISSO / Cloud Security Engineer","description":"About the RoleiAdeptive Technologies is seeking a senior, hands-on ISSO/Cloud Security & DevSecOps Engineer to lead the security authorization for a FedRAMP High environment supporting a federal health agency. Proven ISSO/ATO experience is the primary requirement: this position owns the authorization package and drives the system through authorization on an accelerated timeline.The role works as part of the cloud team, sharing the same backlog, standups, and pipeline as the engineers, and requires strong AWS and DevSecOps skills. Security is implemented directly in the platform and the CI/CD pipeline rather than managed from a separate compliance function.Beyond the program, this is a key corporate security role. The position sets the direction for iAdeptive’s enterprise zero-trust and cybersecurity posture, providing strategy, standards, and oversight across the organization. The role therefore requires genuine depth in security authorization and cloud engineering, combined with the judgment to lead security at a corporate level.How We WorkSecurity Is Embedded, Not Siloed — This position works as part of the cloud team, sharing the same backlog, standups, and pipeline as the engineers, and embeds security controls into the build rather than reviewing them afterward.Authorization-Led and Hands-On — The ATO is the anchor of the role — attaining and sustaining the authorization boundary on an accelerated timeline — while remaining hands-on in AWS and the pipeline throughout.Corporate Security Leadership — Alongside program delivery, the role owns the direction of the company’s zero-trust and cybersecurity posture, setting standards and providing oversight that protect the organization as a whole.What You Will DoISSO / Authorization (Primary)Serve as ISSO for a FedRAMP High environment, owning the authorization package and driving it through attainment and ongoing authorization on an accelerated timeline.Author and maintain the System Security Plan (SSP), control narratives, and supporting artifacts against NIST 800-53 and agency security baselines.Manage Plans of Action and Milestones (POA&Ms), track remediation to closure, and maintain audit-ready evidence.Lead Assessment and Authorization (A&A) activities and serve as the security point of contact for assessors and oversight.Establish and operate continuous monitoring, including vulnerability scanning, configuration compliance, and security event review.Cloud Security & DevSecOps (Required)Operate as an embedded member of the cloud and platform team, participating in the backlog, standups, and pipeline alongside the engineering staff.Implement and validate security controls in AWS GovCloud, including IAM, logging, encryption, network security, and configuration compliance.Build and harden the CI/CD pipeline, embedding security gates, scanning, and automated evidence collection through policy-as-code.Author and review infrastructure-as-code to enforce secure configuration by default.Automate compliance and monitoring to support continuous authorization and efficient post-ATO sustainment.Corporate Cybersecurity & Zero Trust (Strategy & Oversight)Set the direction for the company’s enterprise zero-trust and cybersecurity strategy, standards, and policies.Provide security oversight across the organization, including identity, access, endpoint, and network security posture.Guide the adoption of security best practices company-wide and advise leadership on cyber risk.What We’re Looking ForPrimary RequirementDirect, hands-on ISSO experience in a federal environment, including at least one system taken through Assessment and Authorization (A&A) to an ATO.Strong command of NIST 800-53, the RMF, FedRAMP, and FISMA, with the ability to author control narratives accepted by assessors.Experience managing POA&Ms, continuous monitoring, and audit-ready evidence.Required — Cloud & DevSecOpsHands-on AWS engineering experience, including IAM, encryption, networking, and configuration compliance (GovCloud preferred).Hands-on DevSecOps experience building and securing CI/CD pipelines, infrastructure-as-code, and security automation.A track record of working within an engineering team and delivering implementation work, not solely security review.Clear technical writing and the ability to communicate effectively with both engineers and assessors.Corporate Security LeadershipExperience defining zero-trust or enterprise security strategy, standards, and policy at an organizational level.Ability to advise leadership on cyber risk and drive security best practices across a company.Bonus PointsSecurity certification such as CISSP, CISM, CAP, or AWS Security – Specialty.AWS certification (Solutions Architect, SysOps, or DevOps Engineer).Experience with container security, Terraform, and federal compliance or authorization tracking tooling.Familiarity with ISO/IEC 42001 or AI risk frameworks where AI systems fall within the authorization boundary.Core CompetenciesCompetencyWhat It Looks Like HereAuthorization OwnershipDrives an A&A package through to ATO and sustains it — the primary anchor of the role.Embedded SecurityWorks within the cloud team, integrating controls into the build.Hands-On AWSImplements and validates security controls directly in AWS.DevSecOpsBuilds and secures the CI/CD pipeline using policy-as-code and IaC.Corporate Zero TrustSets enterprise security strategy, standards, and oversight company-wide.CommunicationWrites assessor-ready narratives and advises leadership on cyber risk.Why iAdeptiveiAdeptive Technologies is an 8(a) small business that delivers modern data, cloud, and AI engineering to federal mission programs. We are engineers first. We win work by building systems that hold up under audit and scale under real load — not by selling slideware. You will work alongside architects and engineers who write the code they design, ship into FedRAMP-authorized environments, and treat governance and security as part of the build rather than paperwork bolted on at the end. Small enough that your work is visible; serious enough that it mattersDetailsLocation: Remote (U.S.); Maryland-area candidates preferred for occasional on-site collaborationEmployment Type: Full-time, W-2. Eligibility to work in the U.S. required; this role supports federal programs and may require the ability to obtain a Public Trust or higher background determinationEducation: Bachelor’s degree in computer science, information security, a related field, or equivalent professional experienceExperience: 7+ years across information security and cloud/DevSecOps, including hands-on ISSO experience with a system taken through A&A to ATOBenefits: Health, dental, and vision coverage; 401(k) with company contribution; paid time off and federal holidays; training and certification support","company":"Iadeptive Technologies","rawCompany":"iadeptive technologies","city":"Millbrae","state":"CA","isRemote":false,"isActive":false,"createdAt":"2026-10-07T04:32:48.625Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"ISSO / Cloud Security Engineer","description":"About the RoleiAdeptive Technologies is seeking a senior, hands-on ISSO/Cloud Security & DevSecOps Engineer to lead the security authorization for a FedRAMP High environment supporting a federal health agency. Proven ISSO/ATO experience is the primary requirement: this position owns the authorization package and drives the system through authorization on an accelerated timeline.The role works as part of the cloud team, sharing the same backlog, standups, and pipeline as the engineers, and requires strong AWS and DevSecOps skills. Security is implemented directly in the platform and the CI/CD pipeline rather than managed from a separate compliance function.Beyond the program, this is a key corporate security role. The position sets the direction for iAdeptive’s enterprise zero-trust and cybersecurity posture, providing strategy, standards, and oversight across the organization. The role therefore requires genuine depth in security authorization and cloud engineering, combined with the judgment to lead security at a corporate level.How We WorkSecurity Is Embedded, Not Siloed — This position works as part of the cloud team, sharing the same backlog, standups, and pipeline as the engineers, and embeds security controls into the build rather than reviewing them afterward.Authorization-Led and Hands-On — The ATO is the anchor of the role — attaining and sustaining the authorization boundary on an accelerated timeline — while remaining hands-on in AWS and the pipeline throughout.Corporate Security Leadership — Alongside program delivery, the role owns the direction of the company’s zero-trust and cybersecurity posture, setting standards and providing oversight that protect the organization as a whole.What You Will DoISSO / Authorization (Primary)Serve as ISSO for a FedRAMP High environment, owning the authorization package and driving it through attainment and ongoing authorization on an accelerated timeline.Author and maintain the System Security Plan (SSP), control narratives, and supporting artifacts against NIST 800-53 and agency security baselines.Manage Plans of Action and Milestones (POA&Ms), track remediation to closure, and maintain audit-ready evidence.Lead Assessment and Authorization (A&A) activities and serve as the security point of contact for assessors and oversight.Establish and operate continuous monitoring, including vulnerability scanning, configuration compliance, and security event review.Cloud Security & DevSecOps (Required)Operate as an embedded member of the cloud and platform team, participating in the backlog, standups, and pipeline alongside the engineering staff.Implement and validate security controls in AWS GovCloud, including IAM, logging, encryption, network security, and configuration compliance.Build and harden the CI/CD pipeline, embedding security gates, scanning, and automated evidence collection through policy-as-code.Author and review infrastructure-as-code to enforce secure configuration by default.Automate compliance and monitoring to support continuous authorization and efficient post-ATO sustainment.Corporate Cybersecurity & Zero Trust (Strategy & Oversight)Set the direction for the company’s enterprise zero-trust and cybersecurity strategy, standards, and policies.Provide security oversight across the organization, including identity, access, endpoint, and network security posture.Guide the adoption of security best practices company-wide and advise leadership on cyber risk.What We’re Looking ForPrimary RequirementDirect, hands-on ISSO experience in a federal environment, including at least one system taken through Assessment and Authorization (A&A) to an ATO.Strong command of NIST 800-53, the RMF, FedRAMP, and FISMA, with the ability to author control narratives accepted by assessors.Experience managing POA&Ms, continuous monitoring, and audit-ready evidence.Required — Cloud & DevSecOpsHands-on AWS engineering experience, including IAM, encryption, networking, and configuration compliance (GovCloud preferred).Hands-on DevSecOps experience building and securing CI/CD pipelines, infrastructure-as-code, and security automation.A track record of working within an engineering team and delivering implementation work, not solely security review.Clear technical writing and the ability to communicate effectively with both engineers and assessors.Corporate Security LeadershipExperience defining zero-trust or enterprise security strategy, standards, and policy at an organizational level.Ability to advise leadership on cyber risk and drive security best practices across a company.Bonus PointsSecurity certification such as CISSP, CISM, CAP, or AWS Security – Specialty.AWS certification (Solutions Architect, SysOps, or DevOps Engineer).Experience with container security, Terraform, and federal compliance or authorization tracking tooling.Familiarity with ISO/IEC 42001 or AI risk frameworks where AI systems fall within the authorization boundary.Core CompetenciesCompetencyWhat It Looks Like HereAuthorization OwnershipDrives an A&A package through to ATO and sustains it — the primary anchor of the role.Embedded SecurityWorks within the cloud team, integrating controls into the build.Hands-On AWSImplements and validates security controls directly in AWS.DevSecOpsBuilds and secures the CI/CD pipeline using policy-as-code and IaC.Corporate Zero TrustSets enterprise security strategy, standards, and oversight company-wide.CommunicationWrites assessor-ready narratives and advises leadership on cyber risk.Why iAdeptiveiAdeptive Technologies is an 8(a) small business that delivers modern data, cloud, and AI engineering to federal mission programs. We are engineers first. We win work by building systems that hold up under audit and scale under real load — not by selling slideware. You will work alongside architects and engineers who write the code they design, ship into FedRAMP-authorized environments, and treat governance and security as part of the build rather than paperwork bolted on at the end. Small enough that your work is visible; serious enough that it mattersDetailsLocation: Remote (U.S.); Maryland-area candidates preferred for occasional on-site collaborationEmployment Type: Full-time, W-2. Eligibility to work in the U.S. required; this role supports federal programs and may require the ability to obtain a Public Trust or higher background determinationEducation: Bachelor’s degree in computer science, information security, a related field, or equivalent professional experienceExperience: 7+ years across information security and cloud/DevSecOps, including hands-on ISSO experience with a system taken through A&A to ATOBenefits: Health, dental, and vision coverage; 401(k) with company contribution; paid time off and federal holidays; training and certification support","datePosted":"2026-10-07T04:32:48.625Z","dateModified":"2026-10-07T04:32:48.625Z","hiringOrganization":{"@type":"Organization","name":"Iadeptive Technologies","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Millbrae","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"2b2ca751b87a6dc348324a75"},"url":"https://jobsearcher.com/jobs/2b2ca751b87a6dc348324a75"}}