OneZero Solutions

Manage authorization packages and continuous monitoring for consular systems as ISSO, lead RMF cycles, and guide analysts. | Seven years in information security with four years ISSO/A&A federal experience, relevant certifications, and active Secret clearance. | We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/ Position Title: Senior Information Security Analyst Location: Remote; must reside within the National Capital Region (NCR). Clearance: Secret Work Schedule: Full-time, 40 hours per week. Must be available during Department core hours of 9:00 a.m. – 3:00 p.m. ET, Monday – Friday, and flex working hours as needed to meet CST day-to-day and emergent requirements. No work is performed on Federal holidays or during Government closures. Employment Type: Full-Time, Exempt (W-2), contingent upon Call Order award Position Summary The Senior Information Security Analyst serves as ISSO of record for an assigned portfolio of approximately 6–8 Moderate-baseline consular systems. The Senior Analyst owns each system's authorization package and continuous monitoring cadence end to end, leads the system's triennial RMF cycle, directs technical remediation by system operations teams, and provides day-to-day direction to Information Assurance Analysts supporting the portfolio. Key Responsibilities Serve as ISSO of record and primary cybersecurity point of contact for an assigned portfolio of approximately 6–8 Moderate-baseline systems. Execute RMF Steps 1–3 for assigned systems: categorization with CIA justification, baseline and overlay selection, tailoring rationale, Inherited Controls Matrix, SSP and Security Control Implementation Statements, Evidence Index, and Implementation Readiness Review. Develop and maintain PIA, DIRA, ISA/MOU, Security Assessment Plan, POA&M, SIA, system inventory, IRP, CP/ISCP, CP Test report, and CMP for assigned systems; ensure CMPs are delivered into the GRC tool. Set up and support Security Control Review Meetings and demos, collect and validate artifacts requested by the SCA, attend A&A Findings Meetings, and support remediation validation(RMF Step 4). Maintain authoritative POA&Ms in theGRC tool (monthlyupdates and within 5 business days of status changes) with realistic milestones, accurate risk levels, and closure evidence attached (RMF Step 6). Review iPost scores weekly; coordinate remediation with system and application teams; track and report findings open more than 30 days. Review vulnerability, KEV, CVE, and STIG results within 5 business days; drive critical and high remediation within Department and BOD timelines; document in POA&Ms. Conduct annual Contingency Plan tests and Annual Control Assessments; document results and lessons learned; update CP, ISCP, IRP, and CMP as needed. Perform Security Impact Analyses for hardware, software, patch, and configuration changes; participate in CCB/ECM; contribute to the Quarterly Configuration and Change Impact Summary. Coordinate incident reporting and documentation with the SOC and system owners; reflect outcomes in risk posture and POA&Ms. Direct system-specific security operations contractors to obtain evidence and implement remediation; validate completion before POA&M closure. Support audits and data calls (OIG, GAO, CISA, HVA, BOD, OMB, CDM) and maintain the Audit and Data Call Response Package for assigned systems. Provide day-to-day direction and quality review for Information Assurance Analysts supporting the portfolio. Required Qualifications Seven (7)+ years of information security experience, including four (4)+ years as an ISSO or in an equivalent A&A role for federal information systems. Demonstrated experience authoring SSPs, POA&Ms, contingency plans, and supporting authorization packages under NIST SP 800-37 / SP 800-53 Rev. 5. One of: CISSP, CISM, CGRC/CAP, or CISA (DoD 8140/8570 IAM Level II or higher). Active, final SECRET security clearance; U.S. citizenship. Experience with an enterprise GRC tool and with interpreting vulnerability scan results. Strong technical writing and stakeholder coordination skills. Preferred Qualifications Department of State (DT/CA/CST) experience; ArchAngel and iPost proficiency. Experience with cloud or hybrid authorization boundaries and FedRAMP inheritance. Experience conducting NIST SP 800-34 contingency plan tests and NIST SP 800-63 Digital Identity Risk Assessments. Security+ CE, CySA+, or CCSP in addition to the required certification. Technical Skills NIST SP 800-37 Rev. 2, 800-53/53A Rev. 5, 800-60, 800-34, 800-61, FIPS 199/200; CISA BODs and KEV. GRC platforms (ArchAngel or equivalent), iPost or equivalent, POA&M lifecycle management. Reading Tenable/Nessus, Wiz, and STIG output; understanding of patch and configuration management. Visio diagramming; advanced Word/Excel; SharePoint/Teams collaboration. Security Clearance Active, final SECRET Education Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an additional four (4) years of directly relevant experience in lieu of degree. Remote/Hybrid/On-site and any other relevant work-environment requirement Remote. Duties are performed remotely; the selected candidate must reside within the National Capital Region (NCR). The Government does not furnish equipment; OneZero provides the laptop and collaboration tools. Position requires an OpenNet account, DoS PIV badge, multifactor authentication, and adherence to DoS SBU/CUI handling requirements. Local travel within the National Capital Region; minimal other travel. Contract: U.S. Department of State, Bureau of Diplomatic Technology (DT), Enterprise Applications (EA), Consular Systems and Technology (CST) ISSO Support. GSA MAS HACS BPA 19AQMM26Q0274, Call Order 1 (RFQ 19AQMM26R0381). Firm-Fixed-Price; 12-month base period (including 3-month transition-in) plus four 1-year option periods; anticipated start September 30, 2026. Position Status: New Position, contingent upon Call Order award OneZero Solutions LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Own cloud security engineering for hybrid authorization boundaries, operate Wiz platform, perform vulnerability and compliance scanning. | 8+ years cybersecurity experience, 3+ years federal cloud security, Secret clearance, IAT Level III or IAM Level II certification, bachelor's degree. | We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/ Position Title: Cyber Security Engineer – Senior / Cloud Location: Remote; must reside within the National Capital Region (NCR). Clearance: Secret Work Schedule: Full-time, 40 hours per week. Must be available during Department core hours of 9:00 a.m. – 3:00 p.m. ET, Monday – Friday, and flex working hours as needed to meet CST day-to-day and emergent requirements. No work is performed on Federal holidays or during Government closures. Participates in a rotating on-call schedule supporting 24x7x365 availability of the vulnerability and compliance scanning platforms. Employment Type: Full-Time, Exempt (W-2), contingent upon Call Order award Position Summary The Senior Cloud Security Engineer owns cloud security engineering for DT/EA/CST's cloud-based and hybrid authorization boundaries. The engineer operates and extends the Wiz cloud security platform, applies Department cloud and zero-trust overlays, documents controls inherited from cloud service providers and DT enterprise services, supports cryptographic key management activities, and produces the cloud evidence the ISSO team needs to obtain and maintain ATOs. Key Responsibilities Engineer, operate, and maintain the Wiz platform for cloud-based consular systems: account/subscription onboarding, asset grouping and tagging per CA configuration standards, policy tuning, integrations, and dashboards. Support agent deployment, vulnerability and compliance scanning, data ingest and sharing, pipeline, and other integration efforts for cloud workloads. Apply Department and CA cloud-security and zero-trust overlays; identify and document controls inherited from CSPs and DT enterprise services in each system's Inherited Controls Matrix and SSP(RMF Step 2). Support cryptographic key management and encryption key lifecycle activities for cloud and hybrid systems. Develop and maintain cloud architecture, network, and data-flow diagrams and evidence for System Boundary & Data Flow Packages and the Evidence Index(RMF Steps 1 and 3). Review cloud vulnerability and compliance scan results within 5 business days of scan completion; drive critical and high findings to closure within Department and BOD timelines; provide closure evidence to ISSOs for POA&M management(RMF Step 6). Perform Security Impact Analysis on cloud infrastructure and configuration changes submitted through CA change management; participate in CCB/ECM. Demonstrate cloud control implementations during Security Control Review Meetings and provide screenshots, logs, and configuration evidence to the SCA(RMF Step 4). Support infrastructure-as-code and container image security checks in DevSecOps pipelines and ensure results are captured as SSP evidence(RMF Step 3). Coordinate with cloud system operations teams and CSPs to validate remediation and maintain the accredited security posture of cloud systems. Required Qualifications Eight (8)+ years of cybersecurity or systems engineering experience, including three (3)+ years securing federal workloads in AWS GovCloud, Azure Government, or equivalent. Hands-on experience with a CNAPP/CSPM platform (Wiz strongly preferred; Prisma Cloud, Defender for Cloud, or equivalent considered). Working knowledge of NIST SP 800-53 Rev. 5 control implementation in cloud environments and FedRAMP inheritance models. Active, final SECRET security clearance; U.S. citizenship. DoD 8140/8570 IAT Level III or IAM Level II baseline certification (e.g., CISSP, CASP+, CCSP, CISM) or ability to obtain within 6 months. Experience producing authorization evidence (diagrams, configuration exports, scan reports) for ISSOs and assessors. Preferred Qualifications CCSP, AWS Certified Security – Specialty, or Azure Security Engineer Associate; Wiz certification. Department of State or other federal civilian cloud authorization experience. Experience with Terraform/CloudFormation security, Kubernetes/container security, and CI/CD pipeline integration. Experience with cryptographic key management services (AWS KMS, Azure Key Vault, HSMs) and FIPS 140-2/140-3 validated modules. Technical Skills Wiz (or comparable CNAPP), AWS/Azure native security services, IAM, logging/monitoring, KMS/Key Vault. Tenable integration for hybrid boundaries; STIG/CIS benchmarks for cloud OS and services. Infrastructure-as-code (Terraform, CloudFormation, Bicep), containers/Kubernetes, CI/CD tooling. NIST SP 800-53 Rev. 5, 800-144/145/210 cloud guidance, FedRAMP, zero-trust architecture (NIST SP 800-207). Scripting (Python, PowerShell, Bash) and REST API automation; Visio diagramming. Education Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an additional four (4) years of directly relevant experience in lieu of degree. Remote/Hybrid/On-site and any other relevant work-environment requirement Remote. Duties are performed remotely; the selected candidate must reside within the National Capital Region (NCR). The Government does not furnish equipment; OneZero provides the laptop and collaboration tools. Position requires an OpenNet account, DoS PIV badge, multifactor authentication, and adherence to DoS SBU/CUI handling requirements. Local travel within the National Capital Region; minimal other travel. Position Status: New Position, contingent upon Call Order award OneZero Solutions LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Lead ISSO activities for complex high-value cloud/hybrid systems including RMF categorization, authorization, assessments, and risk management while mentoring analysts. | 10+ years information security experience with 6+ years as ISSO or federal A&A lead, CISSP/CISM certification, active SECRET clearance, and bachelor's degree. | We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/ Position Title: SME – Information Security Analyst Location: Remote; must reside within the National Capital Region (NCR). Work Schedule: Full-time, 40 hours per week. Must be available during Department core hours of 9:00 a.m. – 3:00 p.m. ET, Monday – Friday, and flex working hours as needed to meet CST day-to-day and emergent requirements. No work is performed on Federal holidays or during Government closures. Employment Type: Full-Time, Exempt (W-2), contingent upon Call Order award Position Summary The SME – Information Security Analyst is the program's most senior ISSO practitioner. The SME serves as ISSO of record for DT/EA/CST's High Value Assets, High-baseline, cloud/hybrid, and most complex consular systems; leads categorization, control selection, and authorization packages for new and re-authorizing systems; and acts as technical mentor and peer reviewer for the Senior and Information Assurance analysts. Key Responsibilities Serve as ISSO of record and primary cybersecurity point of contact for an assigned portfolio of approximately 3–4 HVA, High-baseline, or otherwise complex systems. Lead RMF Steps 1–3 for new and re-authorizing systems: FIPS 199 / NIST SP 800-60 categorization with documented CIA justifications; baseline selection and HVA, zero-trust, and cloud overlays; Control Tailoring Rationale; Inherited Controls Matrix; SSP development; Security Plan Approval Recommendation Letter; Evidence Index; and Implementation Readiness Review. Develop and maintain the full authorization artifact set: SSP, Security Control Implementation Statements, PIA, DIRA, ISA/MOU, Security Assessment Plan, POA&M, SIA, system inventory, IRP, CP/ISCP, CP Test reports, and CMP. Lead Security Control Review Meetings and control demonstrations with the independent Security Control Assessor; attend A&A Findings Meetings; support remediation validation; prepare the AODR Information Sheet for risk briefings(RMF Steps 4–5). Direct system-specific security operations contractors to obtain technical evidence and implement remediation; validate closure evidence before POA&M closure. Maintain authoritative POA&Ms in the GRC tool with monthly updates and updates within 5 business days of status changes; ensure realistic milestones, accurate risk levels, and attached closure evidence(RMF Step 6). Review iPost scores weekly, coordinate remediation of findings contributing to elevated risk, and track and report findings open more than 30 days. Review vulnerability, KEV, CVE, and STIG scan results within 5 business days; ensure critical and high vulnerabilities are addressed within Department and BOD timelines. Plan and conduct annual Contingency Plan tests and Annual Control Assessments for assigned systems; document objectives, scope, results, and lessons learned. Perform Security Impact Analyses for CCB/ECM changes; prepare the Quarterly Configuration and Change Impact Summary. Coordinate with the SOC, incident response teams, and system owners on incidents; support post-incident reviews and update RMF artifacts accordingly. Serve as first line of defense during OIG, GAO, CISA, HVA, BOD, OMB, penetration test, and CDM audits and data calls; maintain the Audit and Data Call Response Package. Develop system retirement memos and POA&M (risk) transfer memos; validate and close POA&Ms at decommissioning. Mentor Senior and Information Assurance analysts; peer-review artifacts for accuracy, completeness, and Department format compliance. Required Qualifications Ten (10)+ years of information security experience, including six (6)+ years as an ISSO or A&A lead for federal information systems. Expert working knowledge of NIST SP 800-37 Rev. 2, SP 800-53/53A Rev. 5, SP 800-60, SP 800-34, and FIPS 199/200; demonstrated experience authoring complete authorization packages. Experience as ISSO for High-baseline or HVA systems, or for cloud/hybrid authorization boundaries. Current CISSP (or CISM, or CGRC/CAP with CISSP obtained within 12 months). Active, final SECRET security clearance; U.S. citizenship. Experience managing POA&Ms and authorization packages in an enterprise GRC tool. Excellent technical writing skills; able to produce Government-ready artifacts with minimal editing. Preferred Qualifications Master's degree in a related field. Department of State (DT/CA/CST) experience; ArchAngel and iPost proficiency. CISA, CRISC, or CCSP certification. Experience with FedRAMP inheritance, DevSecOps pipeline controls, and Privacy (PIA) / Digital Identity (DIRA, NIST SP 800-63) assessments. Technical Skills NIST RMF end to end; SSP, SAR, POA&M, SIA, CP/ISCP, IRP, CMP, PIA, DIRA, ISA/MOU authoring. GRC platforms (ArchAngel or equivalent), iPost or equivalent risk scoring, CDM data. Interpretation of Tenable and Wiz vulnerability/compliance results, KEV reports, STIG scans, and penetration test findings. Visio boundary and data-flow diagramming; advanced Word/Excel for artifact and metrics production. Education Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an additional four (4) years of directly relevant ISSO experience in lieu of degree. Remote/Hybrid/On-site and any other relevant work-environment requirement Remote. Duties are performed remotely; the selected candidate must reside within the National Capital Region (NCR). The Government does not furnish equipment; OneZero provides the laptop and collaboration tools. Position requires an OpenNet account, DoS PIV badge, multifactor authentication, and adherence to DoS SBU/CUI handling requirements. Local travel within the National Capital Region; minimal other travel. Position Status: New Position, contingent upon Call Order award OneZero Solutions LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.