Information Systems Security Manager (ISSM)

Information Systems Security Manager (ISSM)Aalyria Technologies is seeking a highly experienced Information Systems Security Manager (ISSM) to lead the accreditation, operation, and sustained compliance of a newly established, multi-domain classified facility in Chantilly, Virginia. This is a senior individual contributor role with broad technical and programmatic responsibility across a complex, multi-network environment supporting multiple government customers at varying classification levels.The ISSM will serve as the primary interface between Aalyria and government Authorizing Officials (AOs), ISSOs, and program security personnel across multiple networks and enclaves. The selected candidate will join during the facility standup phase and will have significant influence over security architecture, policy, and procedures from the ground up. This role requires deep, hands-on familiarity with IC-specific accreditation frameworks, multi-domain network environments, and the operational discipline to build and sustain a rigorous information security program. During the facility standup phase, the ISSM will carry direct ISSO responsibilities for initial systems prior to additional security team staffing, these responsibilities will diminish as the security team grows. This is a high-trust, high-autonomy position working directly alongside the FSO.Key ResponsibilitiesAccreditation & AuthorizationLead all Assessment & Authorization (A&A) activities for multiple classified and unclassified information systems in accordance with ICD 503, RMF, and applicable IC and DoD directives.Develop, maintain, and submit System Security Plans (SSPs), Security Assessment Reports (SARs), and complete ATO/ATC packages across multiple network enclaves and authorization authorities.Manage pre-authorization coordination with government AOs and system owners; track and drive Plan of Action & Milestones (POA&M) items to resolution.Support physical SCIF accreditation activities and coordinate with the FSO on ICD 705 compliance and TEMPEST/EMSEC requirements during and after facility construction.Coordinate network connection approvals with relevant government network operations centers and accrediting authorities across all authorized enclaves.Operations & Continuous MonitoringDesign and implement continuous monitoring programs for all authorized systems; maintain situational awareness of configuration status, vulnerability posture, and compliance across the environment.Serve as ISSO for multiple systems during the initial facility standup phase, managing transition of responsibilities to the broader security team as it is built out.Conduct regular security assessments, configuration compliance reviews, and vulnerability scans; track and verify remediation to closure.Lead incident detection, response, reporting, and after-action remediation in coordination with the FSO and relevant government security personnel.Maintain all system documentation, security configuration baselines, hardware/software inventories, and change management records in compliance with applicable directives.Program & Stakeholder CoordinationInterface directly with program security officers for Special Access Program (SAP) network requirements, accreditation coordination, and sustained compliance.Coordinate with government network and security teams for classified network connectivity, sustainment, and issue resolution across multiple enclaves.Develop and deliver initial and recurring security awareness training for personnel operating in a multi-domain, multi-classification environment.Collaborate closely with the FSO on personnel security, physical security, and integrated facility compliance matters; serve as a force multiplier in a lean security team environment.Architecture & PolicyReview and approve system architecture changes, new hardware/software requests, and network modifications from a security compliance perspective.Advise on RED/BLACK separation requirements and TEMPEST/EMSEC standards as applied to the facility's classified network and physical infrastructure.Develop and enforce information security policies, procedures, and standard operating procedures specific to multi-domain operations environments.Maintain current working knowledge of applicable IC directives, NIST standards, CNSS policies, and DoD instructions as they evolve.Required QualificationsActive Top Secret clearance with SCI eligibility; must be in-scope and fully adjudicated at time of hire, no interim clearances considered.10+ years of progressive information security experience, with a minimum of 5 years in an ISSM or senior ISSO role within an IC or IC-adjacent contractor environment.Demonstrated, hands-on experience with ICD 503 and IC-specific A&A processes, candidates with DoD RMF experience only will require supplemental evaluation against IC requirements.Multi-domain classified network experience including JWICS, SIPRNet, and NIPRNet; working knowledge of the accreditation and operational differences between enclaves.Experience managing concurrent ATO/ATC processes for multiple systems across different government authorization authorities simultaneously.Working familiarity with TEMPEST/EMSEC standards and their application to classified facility network infrastructure and RED/BLACK separation requirements.DoD 8140 / 8570 IAM Level III certification required at time of hire — CISSP, CISM, or equivalent accepted.Experience developing and maintaining SSPs, POA&Ms, and continuous monitoring documentation in an operational environment.Strong written and verbal communication skills; demonstrated ability to interface credibly with senior government security and program personnel.U.S. citizenship required, no exceptions.Clearance & Access RequirementsThis position requires an active, fully adjudicated Top Secret clearance with SCI eligibility at time of hire. No interim clearances will be accepted for this role under any circumstances.Active TS//SCI required at time of offer; in-scope and fully adjudicatedSAP access eligibility required; candidates with existing SAP accesses will be prioritized.Counterintelligence (CI) or Full Scope Polygraph (FSP) strongly preferred; candidates holding a current polygraph will be prioritized. Candidates without an existing polygraph will be considered — this is not a disqualifier.A SAP briefing will be required for this role. Candidates must be eligible and willing to accept SAP accesses upon hire.Relevant compartment accesses above baseline TS//SCI are a significant differentiator and will be considered during the selection process.Preferred QualificationsPrior experience within Air Force intelligence or Air Force-affiliated SCI enclave environments — direct AFSCI enclave experience is a significant differentiator.Existing SCI compartment accesses above baseline TS//SCI; candidates with current relevant accesses will be prioritized.Experience supporting SAP network accreditation, sustained operations, and direct program security officer coordination.Experience supporting new SCIF standup and initial accreditation under ICD 705, including pre-construction AO coordination and post-construction inspection preparation.Prior ISSM experience for a facility operating 4 or more concurrent classified and unclassified network environments.Familiarity with NRO network security requirements and approval processes.Experience developing operational guidance and training for users working across multiple classification levels and network environments simultaneously.Prior FSO, deputy FSO, or physical/personnel security experience — valuable in the context of a lean, integrated security team.Counterintelligence (CI) or Full Scope Polygraph (FSP) strongly preferred and will be weighted heavily in the selection process. Candidates without a current polygraph will be considered; willingness to complete one is a plus.What We OfferInnovative Environment: Work at a cutting-edge company shaping the future of aerospace communications.Impactful Work: Directly contribute to critical national security programs and initiatives.Growth Opportunities: Expand your career with opportunities for professional development and advancement.Inclusive Culture: Be part of a collaborative, supportive, and inclusive workplace where your contributions matter.Flexibility: Flexible working arrangements including hybrid remote/in-office schedules.Compensation and Equity: Competitive salary, comprehensive benefits (401(k), dental, vision, health, life insurance), paid time off, and equity options.ITAR/EAR RequirementsThis position involves access to export-controlled information. To comply with U.S. government export regulations, applicants must meet one of the following criteria:(A) Qualify as a U.S. person, which includes:U.S. citizen or nationalU.S. lawful permanent resident (green card holder)Refugee under 8 U.S.C. 1157