ISSO Support and Continuous ATO Evidence Engineer
Zaden Tech Huntsville, Alabama, United States
Software Development · 11-50 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The role involves authoring and maintaining Risk Management Framework packages and continuous authorization evidence for a health data exchange platform. You will manage Plans of Action and Milestones (POA&Ms) and automate evidence collection using AWS Config and CI/CD pipelines.
What they look for
Requirements
Candidates must have at least 5 years of experience with DoD RMF packages and eMASS, along with DoD 8140 qualification. U.S. citizenship is required to obtain and maintain the necessary Tier 3 investigation and IT-II designation.
Full description
This position is contingent upon contract award. It supports a new Defense Health Agency program, and the start date follows award and Government access.
You'll author and maintain the Risk Management Framework package for a health data exchange platform and keep its continuous authorization evidence current. You'll write control statements, manage plans of action and milestones, and work with the Government ISSO and the security operations lane so the authorization never lapses.
What you'll do:
Author SP 800-53 Rev. 5 control statements and keep the eMASS package current
Manage POA&Ms from finding to closure with the engineering teams
Automate evidence collection with AWS Config and the platform's pipelines
Support assessments, inheritance decisions and authorization boundary changes
Hold privileged access to the authorization tooling under the program's security rules
Must have:
5 or more years in DoD RMF package work with eMASS
DoD 8140 qualification for the ISSO work role, or the ability to earn it within six months
Hands-on SP 800-53 Rev. 5 control authoring and POA&M management
U.S. citizenship and the ability to obtain and maintain the Tier 3 investigation and IT-II designation this privileged role needs
Nice to have:
An active Secret clearance or Secret eligibility
Continuous ATO or DevSecOps pipeline evidence experience
AWS GovCloud and AWS Config
DHA or health IT authorization experience
Location: Remote within the United States. Zaden's home office is Huntsville, Alabama.
Citizenship: U.S. citizenship is required for the investigation this role needs.
Questions about this role? Email people@zadentech.com.
How we use AI in hiring: Zaden uses AI tools to help organize and prioritize applications. People review every application and make every hiring decision. To ask about an accommodation or about how your application was reviewed, email people@zadentech.com.
If you need an accommodation to apply or interview, email people@zadentech.com and a person will help.
Equal opportunity: Zaden Technologies is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or any other status the law protects.
