ISSO Security Analyst (SSA)

Who We Are

Known for being a Best Place to Work and a People First company, IronArch Technology is an award-winning Service-Disabled Veteran-Owned Small Business (SDVOSB) specializing in providing innovative solutions and world class services to Federal Government clients.

Our employees have voted us as a 'Best Place to Work' 9 times and we are an INC 5000 recipient for being one of the fastest growing businesses in the United States.

Our Values: Deliver Outcomes with Speed | Own the Work and the Results | Respect People. Speak Directly. | Stay Curious. Enjoy the Journey.

What You'll Do

IronArch Technology is seeking an ISSO Security Analyst (SSA) to support Department of Veterans Affairs (VA) cybersecurity initiatives by assisting with Risk Management Framework (RMF) and Authorization to Operate (ATO) activities for mission-critical information systems.

As a member of our cybersecurity team, you will work closely with VA Information System Owners (ISOs), Information System Security Officers (ISSOs), site managers, engineers, and system stakeholders to support the successful execution of RMF lifecycle activities while ensuring compliance with Federal cybersecurity requirements.

You will help maintain the appropriate operational security posture of information systems throughout their lifecycle-from acquisition and implementation through production operations and eventual decommissioning. You will prepare and maintain security documentation, coordinate authorization activities, identify cybersecurity risks, and assist with implementing secure, compliant IT solutions.

This is an excellent opportunity for a cybersecurity professional looking to expand their expertise in RMF, ATO, and Federal information security while supporting one of the nation's largest healthcare organizations.

Work Location: Remote (U.S.-based). Occasional travel to VA or customer locations may be required for meetings, security reviews, or program activities.

Key Responsibilities

Risk Management Framework (RMF) & Authorization Support

• Support RMF Steps 0-6 activities for Authorization to Operate (ATO) packages.
• Assist Information System Owners (ISOs), ISSOs, and system stakeholders throughout the authorization lifecycle.
• Support compliance with VA cybersecurity policies, FISMA, NIST, and agency authorization requirements.
• Assist with system authorizations, continuous monitoring, annual assessments, and security reviews.
• Track authorization milestones, documentation updates, and artifact expiration dates across multiple information systems.

Security Documentation & Compliance

• Develop, update, and maintain System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), Security Impact Analyses (SIAs), and other RMF documentation.
• Document NIST SP 800-53 security control implementations and assist with validating compliance.
• Analyze authorization documentation to identify gaps and support remediation efforts.
• Maintain complete, accurate, and audit-ready security documentation throughout the system lifecycle.

Risk Assessment & Security Advisory

• Assist in identifying cybersecurity risks associated with system implementations, upgrades, and operational environments.
• Support the development of mitigation strategies in collaboration with technical and business stakeholders.
• Provide security guidance for system installations, major changes, cloud implementations, and application development efforts.
• Support presentations of security findings and authorization status to government stakeholders.

Client Engagement & Collaboration

• Support assigned information systems as part of the cybersecurity team.
• Participate in customer meetings involving RMF, ATO, and security compliance activities.
• Collaborate with engineers, developers, project managers, system owners, and cybersecurity teams to achieve authorization objectives.
• Translate cybersecurity requirements into practical recommendations for technical and non-technical stakeholders.

Continuous Improvement

• Support Continuous Authorization and Monitoring (CAM) initiatives.
• Recommend improvements to security documentation and RMF processes.
• Stay current with evolving VA cybersecurity guidance, NIST publications, and Federal security requirements.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Electronics Engineering, or a related field with 5+ years of professional Information Technology experience; or
• 13+ years of professional Information Technology experience in lieu of a degree.
• Experience supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processes.
• Experience creating, updating, and maintaining FISMA security documentation and RMF artifacts.
• Working knowledge of NIST SP 800-53 security controls, Risk Management Framework (RMF), FISMA, and Federal cybersecurity compliance requirements.
• Experience supporting secure product implementations, system major changes, and development lifecycle security activities.
• Experience analyzing authorization documentation and supporting remediation efforts.
• Ability to lead or actively participate in client meetings involving RMF and ATO activities.
• Strong organizational skills with the ability to manage multiple authorization packages, documentation sets, and project timelines.
• Ability to obtain and maintain a VA Public Trust Clerance.

AI Capabilities

• Experience using AI-assisted tools responsibly to improve cybersecurity documentation, security assessments, risk analysis, and operational efficiency.
• Familiarity with AI-enabled cybersecurity capabilities while ensuring compliance with federal security and privacy requirements.

Clearance Requirements

• U.S. Citizenship is required.
• Ability to obtain and maintain a VA Public Trust Clearance.
• Candidates with an active VA Public Trust, current Federal Public Trust, or recently completed VA background investigation are strongly preferred, as they can significantly reduce onboarding timelines.

Preferred Experience

• Prior experience supporting the U.S. Department of Veterans Affairs (VA) is strongly preferred.
• Experience supporting Continuous Authorization and Monitoring (CAM).
• Experience supporting Authorization to Operate (ATO) packages for specialized devices, enterprise applications, or cloud environments.
• Experience with the VA Enterprise Cybersecurity Program (ECP) and VA Risk Management Framework (RMF) processes.
• Experience using VA security tools such as eMASS, Archer, and ServiceNow.
• Excellent written, verbal, and presentation communication skills.
• Ability to effectively communicate with technical teams, executive leadership, and government stakeholders.
• Professional certifications such as Security+, CAP, CISSP (Associate), CASP+, CISM, or equivalent are highly desirable.
• Active VA Public Trust or recently adjudicated Federal Public Trust is highly desirable.

(#LI-remote)

Why IronArch Technology?

• Awarded Best Place to Work 9 times!
• Competitive compensation and market-leading bonus opportunities
• Medical, dental and vision benefits where a significant portion of the premium is subsidized by IronArch. For qualifying high deductible health plans, IronArch also contributes towards a Health Reimbursement Account to cover eligible medical expenses
• Company-provided healthcare concierge assistance to help explain your coverage in plain language; help you find, choose, and schedule quality care; and address billing, benefit, or claims concerns, potentially saving hours of your time
• 401(k) retirement plan where the company contributes dollar for dollar up to 3 percent, and 50 cents on the dollar for the 4th and 5th percent with immediate entry and immediate vesting
• 20 days of PTO accumulated per calendar year
• 11paid holidays
• Bereavement, jury duty, parental (maternity/paternity/adoption), and military leaves
• Sabbatical programs
• Company-paid short- and long-term disability
• Company-paid life insurance
• Voluntary life, accidental and indemnity income replacement benefits
• Professional development reimbursement
• Health club reimbursement
• Matching donation program and annual philanthropic activities
• Pet insurance
• And more!

Apply today to learn why IronArch Technology has been recognized as "Best Place to Work" for 9 years!

IronArch Technology is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law.

In alignment with applicable state and local pay transparency laws, IronArch includes a salary range in our job descriptions to support equity and transparency in our hiring process. The compensation range provided reflects what we reasonably expect to offer for this role, with the final offer determined by a variety of factors including skills, experience, and scope of responsibilities.