ISSO Support and Continuous ATO Evidence Engineer

About the role

This position is contingent upon contract award. It supports a new Defense Health Agency program, and the start date follows award and Government access.

You'll author and maintain the Risk Management Framework package for a health data exchange platform and keep its continuous authorization evidence current. You'll write control statements, manage plans of action and milestones, and work with the Government ISSO and the security operations lane so the authorization never lapses.

What you'll do

• Author SP 800-53 Rev. 5 control statements and keep the eMASS package current
• Manage POA&Ms from finding to closure with the engineering teams
• Automate evidence collection with AWS Config and the platform's pipelines
• Support assessments, inheritance decisions and authorization boundary changes
• Hold privileged access to the authorization tooling under the program's security rules

Must have

• 5 or more years in DoD RMF package work with eMASS
• DoD 8140 qualification for the ISSO work role, or the ability to earn it within six months
• Hands-on SP 800-53 Rev. 5 control authoring and POA&M management
• U.S. citizenship and the ability to obtain and maintain the Tier 3 investigation and IT-II designation this privileged role needs

Nice to have

• An active Secret clearance or Secret eligibility
• Continuous ATO or DevSecOps pipeline evidence experience
• AWS GovCloud and AWS Config
• DHA or health IT authorization experience

• Location: Remote within the United States. Zaden's home office is Huntsville, Alabama.
• Citizenship: U.S. citizenship is required for the investigation this role needs.

• How we use AI in hiring: Zaden uses AI tools to help organize and prioritize applications.
• People review every application and make every hiring decision.
• To ask about an accommodation or about how your application was reviewed, email.