Information Systems Security Manager

Job Description Summary

The Applied Research Laboratory for Intelligence & Security (ARLIS) at the University of Maryland is a University-Affiliated Research Center (UARC) dedicated to advancing research, innovation, and technology transition to improve decision making for U.S. national security. ARLIS combines deep scientific expertise with operational insight to address challenges in intelligence analysis, cybersecurity, artificial intelligence / machine learning, quantum science, and human-machine teaming. Researchers, scientists, engineers, and analysts at ARLIS collaborate with government agencies, industry partners, and academic institutions to deliver actionable insights and transformative solutions through research and development. Employees at ARLIS work on projects of critical importance, contribute directly to the nation's security, and are supported by a culture that values integrity, collaboration, and professional growth.

The Applied Research Laboratory for Intelligence and Security (ARLIS) at the University of Maryland is seeking an IT systems Engineer who will also serve as an Information Systems Security Manager (ISSM) to support advanced research programs at the intersection of technology and national security. This role operates within a mission-driven environment focused on delivering secure, scalable, and high-performance computing and information systems in support of classified and unclassified research. ARLIS works at the intersection of academic innovation and intelligence community priorities, addressing complex, real-world national security challenges.

The ideal candidate is a hands‑on technical leader with deep expertise in systems engineering, cybersecurity, and compliance frameworks, capable of operating in highly regulated environments while enabling cutting‑edge R&D.

Final offer is contingent upon the candidate's ability to successfully obtain the necessary interim Secret security clearance, as determined by the U.S. Government, prior to commencing employment.

Key Responsibilities

• Design, implement, and maintain secure IT systems and infrastructure supporting research and operational environments.
• Serve as ISSM, ensuring compliance with applicable federal cybersecurity frameworks (e.g., NIST RMF, ICD 503, CNSSI).
• Lead system authorization activities, including ATO/ATO renewals, continuous monitoring, and security documentation.
• Develop, implement, and enforce security policies, procedures, and controls across classified and controlled environments.
• Partner with research teams to enable secure execution of AI/ML, data science, and advanced analytics workloads.
• Oversee vulnerability management, incident response, and risk mitigation strategies.
• Manage identity, access control, auditing, and system hardening in accordance with mission requirements.
• Collaborate with IT operations, networking, and cloud teams to ensure resilient and compliant system architectures.
• Support audits, inspections, and stakeholder engagements with government sponsors and oversight bodies.
• Contribute to strategic IT initiatives that advance ARLIS research capabilities and infrastructure.

Physical Demands

Sedentary work performed in a normal office environment; exerts up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Ability to attend meetings both on and off campus. Spending long hours in front of a computer screen.

Licenses/ Certifications

N/A

Minimum Qualifications

• Bachelor's degree from an accredited college or university.
• Three (3) years of professional experience in IT systems engineering, cybersecurity, or IT infrastructure.
• One (1) year of experience leading or supervising professional staff.
• Additional work experience as defined above may be substituted on a year for year basis for up to four (4) years of the required education.
• Must be able to obtain a U.S. security clearance.

Knowledge, Skills, & Abilities

• Knowledge of federal cybersecurity frameworks and standards, including NIST Risk Management Framework (RMF), ICD 503, and CNSSI requirements for classified and controlled systems.
• Knowledge of cybersecurity principles such as system hardening, identity and access management, vulnerability management, and secure system architecture design.
• Knowledge of system authorization processes, including Authorization to Operate (ATO) development, renewal, and continuous monitoring requirements.
• Knowledge of secure research computing environments, including infrastructure supporting AI/ML, data science, and high‑performance computing workloads.
• Skill in designing, implementing, and maintaining secure IT systems and infrastructure in complex or research‑driven environments.
• Skill in leading ATO lifecycle activities, including documentation, security control implementation, assessment coordination, and continuous monitoring.
• Skill in vulnerability management, incident response coordination, and risk mitigation planning.
• Skill in collaborating across IT operations, cloud, networking, and research teams to ensure secure and compliant system operations.
• Ability to serve effectively as an Information Systems Security Manager (ISSM) with accountability for system security and compliance.
• Ability to interpret and apply federal cybersecurity requirements to operational and research environments.
• Ability to manage competing priorities across multiple systems while maintaining compliance with security and accreditation requirements.
• Ability to communicate complex cybersecurity requirements to technical teams, leadership, and external oversight bodies.

Additional Job Details

Preferences

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• Minimum of 5 years of experience in systems engineering, cybersecurity, or IT infrastructure roles.
• Professional certifications such as CISSP, CISM, Security+, or equivalent.
• Demonstrated experience with RMF accreditation processes and security compliance in federal environments.
• Hands‑on experience with Linux/Windows systems administration, networking, and virtualization.
• Familiarity with cloud platforms (AWS, Azure, or similar) in secure environments.
• Active U.S. security clearance.
• Experience serving as ISSO or ISSM in classified or regulated environments.
• Experience supporting high‑performance computing (HPC), AI/ML infrastructure, or data‑intensive systems.
• Knowledge of DevSecOps practices and secure software/system lifecycle integration.
• Experience working in or supporting Department of Defense or Intelligence Community programs.

EEO Statement

The University of Maryland, College Park is an Equal Opportunity Employer. All qualified applicants will receive equal consideration for employment. Please read the University's Equal Employment Opportunity Statement of Policy.